32898a1454
`clipcount' is from userspace and thus needs validation. Otherwise, a large `clipcount' could overflow the vmalloc() size, leading to out-of-bounds access. | setup_window() | zoran_s_fmt_vid_overlay() | __video_do_ioctl() | video_ioctl2() Use 2048 as the maximum `clipcount'. Also change the corresponding parameter type to `unsigned int'. Signed-off-by: Xi Wang <xi.wang@gmail.com> Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com> |
||
|---|---|---|
| .. | ||
| Kconfig | ||
| Makefile | ||
| videocodec.c | ||
| videocodec.h | ||
| zoran.h | ||
| zoran_card.c | ||
| zoran_card.h | ||
| zoran_device.c | ||
| zoran_device.h | ||
| zoran_driver.c | ||
| zoran_procfs.c | ||
| zoran_procfs.h | ||
| zr36016.c | ||
| zr36016.h | ||
| zr36050.c | ||
| zr36050.h | ||
| zr36057.h | ||
| zr36060.c | ||
| zr36060.h | ||