android_kernel_samsung_a7y1.../include/media/davinci
Dan Carpenter 693df3d08b media: davinci/vpbe: array underflow in vpbe_enum_outputs()
[ Upstream commit b72845ee5577b227131b1fef23f9d9a296621d7b ]

In vpbe_enum_outputs() we check if (temp_index >= cfg->num_outputs) but
the problem is that "temp_index" can be negative.  This patch changes
the types to unsigned to address this array underflow bug.

Fixes: 66715cdc3224 ("[media] davinci vpbe: VPBE display driver")

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: "Lad, Prabhakar" <prabhakar.csengg@gmail.com>
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-04-07 13:41:48 +02:00
..
ccdc_types.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
dm355_ccdc.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
dm644x_ccdc.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
isif.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
vpbe_display.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
vpbe_osd.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
vpbe_types.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
vpbe_venc.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
vpbe.h media: davinci/vpbe: array underflow in vpbe_enum_outputs() 2020-04-07 13:41:48 +02:00
vpfe_capture.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
vpfe_types.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
vpif_types.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
vpss.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30