Philipp Stanner 537872d1e3 media: drivers/media/dvb-core: copy user arrays safely ...

[ Upstream commit 102fb77c2deb0df3683ef8ff7a6f4cf91dc456e2 ]

At several positions in dvb_frontend.c, memdup_user() is utilized to
copy userspace arrays. This is done without overflow checks.

Use the new wrapper memdup_array_user() to copy the arrays more safely.

Link: https://lore.kernel.org/linux-media/20231102191633.52592-2-pstanner@redhat.com
Suggested-by: Dave Airlie <airlied@redhat.com>
Signed-off-by: Philipp Stanner <pstanner@redhat.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2024-08-29 17:30:35 +02:00

..

dmxdev.c

…

dvb_ca_en50221.c

…

dvb_demux.c

…

dvb_frontend.c

media: drivers/media/dvb-core: copy user arrays safely

2024-08-29 17:30:35 +02:00

dvb_math.c

…

dvb_net.c

…

dvb_ringbuffer.c

…

dvb_vb2.c

…

dvbdev.c

media: dvbdev: Initialize sbuf

2024-07-05 09:31:49 +02:00

Kconfig

…

Makefile

…