UbiquitousOS
/
OpenCloudOS-Kernel
mirror of https://gitee.com/OpenCloudOS/OpenCloudOS-Kernel.git
11
0
Fork 0
Code Issues Projects Releases Wiki Activity
OpenCloudOS-Kernel/drivers/media/usb
History
Matthias Schwarzott e59eb4adf0 media: cx231xx: fix use-after-free when unregistering the i2c_client for the dvb demod 
Calling i2c_unregister_device for a demod driver destroys the frontend object.
Later it is accessed by calling dvb_unregister_frontend and
dvb_frontend_detach.

In some cases this leads to a general protection fault with this
callstack:

  dvb_unregister_frontend+0x25/0x50 [dvb_core]
  dvb_fini+0xdb/0x160 [cx231xx_dvb]
  cx231xx_unregister_extension+0x3d/0xb0 [cx231xx]
  cx231xx_dvb_unregister+0x10/0x809 [cx231xx_dvb]
  SyS_delete_module+0x18a/0x240
  ? exit_to_usermode_loop+0x7b/0x80
  entry_SYSCALL_64_fastpath+0x17/0x98

Signed-off-by: Matthias Schwarzott <zzam@gentoo.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>
 		2017-08-27 06:33:47 -04:00
..
airspy media: usb: constify usb_device_id 2017-08-20 08:04:51 -04:00
as102 media: usb: constify usb_device_id 2017-08-20 08:04:51 -04:00
au0828 media: usb: make i2c_adapter const 2017-08-26 08:41:58 -04:00
b2c2 media: usb: constify usb_device_id 2017-08-20 08:04:51 -04:00
cpia2 media: usb: constify usb_device_id 2017-08-20 08:04:51 -04:00
cx231xx media: cx231xx: fix use-after-free when unregistering the i2c_client for the dvb demod 2017-08-27 06:33:47 -04:00
dvb-usb media: rc: rename RC_TYPE_* to RC_PROTO_* and RC_BIT_* to RC_PROTO_BIT_* 2017-08-20 10:02:48 -04:00
dvb-usb-v2 media: rc: rename RC_TYPE_* to RC_PROTO_* and RC_BIT_* to RC_PROTO_BIT_* 2017-08-20 10:02:48 -04:00
em28xx media: em28xx: calculate left volume level correctly 2017-08-26 14:31:49 -04:00
go7007 media: usb: make snd_pcm_hardware const 2017-08-20 08:05:10 -04:00
gspca media: : usb: add const to v4l2_file_operations structures 2017-07-20 16:45:25 -04:00
hackrf media: usb: constify usb_device_id 2017-08-20 08:04:51 -04:00
hdpvr media: usb: make i2c_adapter const 2017-08-26 08:41:58 -04:00
msi2500 media: usb: constify usb_device_id 2017-08-20 08:04:51 -04:00
pulse8-cec media: usb: pulse8-cec: constify serio_device_id 2017-08-20 08:27:13 -04:00
pvrusb2 media: usb: make i2c_adapter const 2017-08-26 08:41:58 -04:00
pwc [media] media drivers: annotate fall-through 2017-05-19 07:10:03 -03:00
rainshadow-cec media: usb: rainshadow-cec: constify serio_device_id 2017-08-20 08:27:29 -04:00
s2255 media: usb: constify usb_device_id 2017-08-20 08:04:51 -04:00
siano [media] siano: make it work again with CONFIG_VMAP_STACK 2017-02-14 18:13:49 -02:00
stk1160 media: usb: make i2c_adapter const 2017-08-26 08:41:58 -04:00
stkwebcam media: usb: constify usb_device_id 2017-08-20 08:04:51 -04:00
tm6000 media: rc: rename RC_TYPE_* to RC_PROTO_* and RC_BIT_* to RC_PROTO_BIT_* 2017-08-20 10:02:48 -04:00
ttusb-budget media: usb: constify usb_device_id 2017-08-20 08:04:51 -04:00
ttusb-dec media: usb: constify usb_device_id 2017-08-20 08:04:51 -04:00
usbtv media: usb: make snd_pcm_hardware const 2017-08-20 08:05:10 -04:00
usbvision media: usb: make i2c_adapter const 2017-08-26 08:41:58 -04:00
uvc media: uvcvideo: Constify video_subdev structures 2017-08-20 08:10:24 -04:00
zr364xx media: zr364xx: constify videobuf_queue_ops structures 2017-08-20 08:07:45 -04:00
Kconfig [media] rainshadow-cec: new RainShadow Tech HDMI CEC driver 2017-04-10 12:42:10 -03:00
Makefile [media] rainshadow-cec: new RainShadow Tech HDMI CEC driver 2017-04-10 12:42:10 -03:00