a716e9d75f
The go7007 driver has a potential buffer overflow and pointer corruption bug which causes a crash while capturing MJPEG. The motion detection (MODET) active_map array can be overflowed by JPEG frame data that emulates a MODET start code. The active_map overflow overwrites the active_buf pointer, causing a crash. The JPEG data that emulated MODET start code was being removed from the output, resulting in garbled JPEG frames. Therefore ignore MODET start codes when MODET is not enabled. Signed-off-by: Pete Eberlein <pete@sensoray.com> Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com> |
||
---|---|---|
.. | ||
Kconfig | ||
Makefile | ||
README | ||
go7007-driver.c | ||
go7007-fw.c | ||
go7007-i2c.c | ||
go7007-priv.h | ||
go7007-usb.c | ||
go7007-v4l2.c | ||
go7007.h | ||
go7007.txt | ||
s2250-board.c | ||
s2250-loader.c | ||
s2250-loader.h | ||
saa7134-go7007.c | ||
snd-go7007.c | ||
wis-i2c.h | ||
wis-ov7640.c | ||
wis-saa7113.c | ||
wis-saa7115.c | ||
wis-sony-tuner.c | ||
wis-tw2804.c | ||
wis-tw9903.c | ||
wis-uda1342.c |
README
Todo: - checkpatch.pl cleanups - sparse cleanups - lots of little modules, should be merged together and added to the build. - testing? - handle churn in v4l layer. Please send patchs to Greg Kroah-Hartman <greg@kroah.com> and Cc: Ross Cohen <rcohen@snurgle.org> as well.