linux/drivers/media
Dan Carpenter bf5bbed15c [media] dvb-usb: check for invalid length in ttusb_process_muxpack()
This patch is driven by a static checker warning.
The ttusb_process_muxpack() function is only called from
ttusb_process_frame().  Before calling, it verifies that len >= 2.  The
problem is that len == 2 is not valid and would lead to an array
underflow.
Odd number values for len are also invalid and would lead to reading
past the end of the array.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
2013-02-08 17:29:52 -02:00
..
common [media] tveeprom: Fix lots of bad whitespace 2013-02-08 16:19:22 -02:00
dvb-core [media] dvb_frontend: print a msg if a property doesn't exist 2013-01-23 19:10:57 -02:00
dvb-frontends [media] use IS_ENABLED() macro 2013-02-06 09:24:09 -02:00
firewire
i2c [media] tveeprom: move from media/i2c to media/common 2013-02-08 16:12:29 -02:00
mmc Drivers: media: remove __dev* attributes. 2013-01-03 15:57:02 -08:00
parport [media] bw-qcam: remove unnecessary qc_reset and qc_setscanmode calls 2013-02-05 18:20:38 -02:00
pci [media] btcx-risc: move from media/i2c to media/common 2013-02-08 16:11:25 -02:00
platform [media] s5p-tv: Include missing platform_device.h header 2013-02-08 17:29:22 -02:00
radio [media] radio-miropcm20: fix signal and stereo indication 2013-02-05 18:17:03 -02:00
rc [media] redrat3: fix transmit return value and overrun 2013-02-08 14:18:16 -02:00
tuners [media] [PATH,1/2] mxl5007 move reset to attach 2013-02-08 15:37:30 -02:00
usb [media] dvb-usb: check for invalid length in ttusb_process_muxpack() 2013-02-08 17:29:52 -02:00
v4l2-core [media] v4l2-core: do not enable the buffer ioctls for radio devices 2013-02-06 13:15:59 -02:00
Kconfig [media] Improve media Kconfig menu 2012-12-27 18:40:09 -02:00
Makefile
media-device.c
media-devnode.c
media-entity.c