anolis-cloud-kernel/drivers/media/platform
Hans Verkuil 9a0c55fbf6 media: vivid: dev->bitmap_cap wasn't freed in all cases
ANBZ: #6982

commit 1f65ea411c upstream.

Whenever the compose width/height values change, the dev->bitmap_cap
vmalloc'ed array must be freed and dev->bitmap_cap set to NULL.

This was done in some places, but not all. This is only an issue if
overlay support is enabled and the bitmap clipping is used.

Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
Fixes: ef834f7836 ([media] vivid: add the video capture and output parts)
Signed-off-by: Mauro Carvalho Chehab <mchehab@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

Fixes: CVE-2023-0615
Signed-off-by: Xiao Long <xiaolong@openanolis.org>
Signed-off-by: Qinyun Tan <qinyuntan@linux.alibaba.com>
Reviewed-by: Xunlei Pang <xlpang@linux.alibaba.com>
Link: https://gitee.com/anolis/cloud-kernel/pulls/2366
2024-01-10 07:54:24 +00:00
..
am437x
atmel media: atmel: atmel-isc: fix INIT_WORK misplacement 2019-12-05 09:21:29 +01:00
cadence media: v4l: cadence: add VIDEO_V4L2 dependency 2018-06-27 09:51:49 -04:00
cec-gpio media: cec-gpio: support 5v testing 2018-07-25 07:12:36 -04:00
coda media: coda: fix memory corruption in case more than 32 instances are opened 2019-12-13 08:51:37 +01:00
cros-ec-cec media: platform: Add ChromeOS EC CEC driver 2018-07-13 08:44:46 +01:00
davinci media: isif: fix a NULL pointer dereference bug 2019-11-24 08:20:47 +01:00
exynos-gsc media: exynos-gsc: fix return code if mutex was interrupted 2018-08-08 10:57:14 -04:00
exynos4-is media: exynos4-is: fix leaked of_node references 2019-10-05 13:09:35 +02:00
marvell-ccic media: marvell-ccic: fix DMA s/g desc number calculation 2019-07-26 09:14:00 +02:00
meson media: platform: meson-ao-cec: make busy TX warning silent 2018-07-24 17:52:20 -04:00
mtk-jpeg media: mtk-jpeg: Correct return type for mem2mem buffer helpers 2019-04-05 22:33:06 +02:00
mtk-mdp media: mtk-mdp: fix reference count on old device tree 2019-10-05 13:09:41 +02:00
mtk-vcodec media: mtk-vcodec: Release device nodes in mtk_vcodec_init_enc_pm() 2019-02-12 19:47:01 +01:00
mtk-vpu media: mtk-vpu: fix spelling mistake: "Prosessor" -> "Processor" 2018-06-28 06:39:34 -04:00
omap omap-dma/omap_vout_vrfb: fix off-by-one fi value 2019-09-06 10:21:56 +02:00
omap3isp media: omap3isp: Set device on omap3isp subdevs 2019-10-05 13:09:59 +02:00
qcom media: venus: remove invalid compat_ioctl32 handler 2019-12-17 20:34:29 +01:00
rcar-vin media: rcar-vin: fix redeclaration of symbol 2019-11-24 08:20:12 +01:00
rockchip/rga media: rockchip/rga: Correct return type for mem2mem buffer helpers 2019-04-05 22:33:05 +02:00
s3c-camif media: s3c-camif: fix return code for the polling routine 2018-08-08 10:57:14 -04:00
s5p-cec
s5p-g2d media: s5p-g2d: Correct return type for mem2mem buffer helpers 2019-04-05 22:33:05 +02:00
s5p-jpeg media: s5p-jpeg: Check for fmt_ver_flag when doing fmt enumeration 2019-04-05 22:33:15 +02:00
s5p-mfc media: s5p-mfc: Make additional clocks optional 2019-07-26 09:14:10 +02:00
soc_camera media: sh_mobile_ceu: convert to SPDX identifiers 2018-08-03 16:06:08 -04:00
sti media: bdisp: fix memleak on release 2019-12-17 20:34:58 +01:00
stm32 media: stm32-dcmi: fix check of pm_runtime_get_sync return value 2019-12-05 09:21:34 +01:00
tegra-cec
ti-vpe media: mem2mem: Remove unused v4l2_m2m_ops .lock/.unlock 2018-06-28 07:56:49 -04:00
vicodec media: vicodec: fix out-of-range values when decoding 2019-11-20 18:45:46 +01:00
vimc media: vimc: fix component match compare 2019-12-17 20:35:38 +01:00
vivid media: vivid: dev->bitmap_cap wasn't freed in all cases 2024-01-10 07:54:24 +00:00
vsp1 media: vsp1: Fix YCbCr planar formats pitch calculation 2019-11-20 18:46:52 +01:00
xilinx
Kconfig media: platform: fix cros-ec-cec build error 2018-09-17 14:32:29 -04:00
Makefile - New Drivers 2018-08-20 15:38:44 -07:00
fsl-viu.c media: media/platform: fsl-viu.c: fix build for MICROBLAZE 2019-10-05 13:09:38 +02:00
m2m-deinterlace.c media: m2m-deinterlace: Implement wait_prepare and wait_finish 2018-07-04 08:03:04 -04:00
mx2_emmaprp.c media: mx2_emmaprp: Correct return type for mem2mem buffer helpers 2019-04-05 22:33:06 +02:00
pxa_camera.c media: pxa_camera: Fix check for pdev->dev.of_node 2019-11-24 08:20:12 +01:00
rcar-fcp.c Char/Misc driver patches for 4.19-rc1 2018-08-18 11:04:51 -07:00
rcar_drif.c media: rcar_drif: convert to SPDX identifiers 2018-08-03 16:04:29 -04:00
rcar_fdp1.c media: fdp1: Reduce FCP not found message level to debug 2019-10-05 13:09:41 +02:00
rcar_jpu.c media: rcar_jpu: convert to SPDX identifiers 2018-08-03 16:05:08 -04:00
renesas-ceu.c media: renesas-ceu: Add support for YUYV permutations 2018-06-28 06:51:05 -04:00
sh_veu.c media: sh_veu: Correct return type for mem2mem buffer helpers 2019-04-05 22:33:05 +02:00
sh_vou.c media: sh_vou: convert to SPDX identifiers 2018-08-03 16:05:51 -04:00
via-camera.c
via-camera.h
video-mux.c media: video-mux: fix null pointer dereferences 2019-05-31 06:46:29 -07:00
vim2m.c media: vim2m: only cancel work if it is for right context 2019-09-16 08:22:02 +02:00