Niels Dossche 359c27c6dd media: hdpvr: fix error value returns in hdpvr_read ... Error return values are supposed to be negative in hdpvr_read. Most error returns are currently handled via an unsigned integer "ret". When setting a negative error value to "ret", the value actually becomes a large positive value, because "ret" is unsigned. Later on, the "ret" value is returned. But as ssize_t is a 64-bit signed number, the error return value stays a large positive integer instead of a negative integer. This can cause an error value to be interpreted as the read size, which can cause a buffer overread for applications relying on the returned size. Fixes: 9aba42efe8 ("V4L/DVB (11096): V4L2 Driver for the Hauppauge HD PVR usb capture device") Signed-off-by: Niels Dossche <dossche.niels@gmail.com> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Mauro Carvalho Chehab <mchehab@kernel.org>		2022-06-27 09:02:50 +01:00
..
hdpvr-control.c
hdpvr-core.c
hdpvr-i2c.c
hdpvr-video.c	media: hdpvr: fix error value returns in hdpvr_read	2022-06-27 09:02:50 +01:00
hdpvr.h
Kconfig
Makefile