diff options
| author | Vikash Garodia <quic_vgarodia@quicinc.com> | 2023-08-10 07:55:03 +0530 |
|---|---|---|
| committer | Hans Verkuil <hverkuil-cisco@xs4all.nl> | 2023-10-23 12:24:52 +0200 |
| commit | 8d0b89398b7ebc52103e055bf36b60b045f5258f (patch) | |
| tree | 8a91848cc369bff169e2a445e0ab5fb331d25428 /tools/testing/radix-tree/linux.c | |
| parent | b18e36dfd6c935da60a971310374f3dfec3c82e1 (diff) | |
media: venus: hfi: add checks to handle capabilities from firmware
The hfi parser, parses the capabilities received from venus firmware and
copies them to core capabilities. Consider below api, for example,
fill_caps - In this api, caps in core structure gets updated with the
number of capabilities received in firmware data payload. If the same api
is called multiple times, there is a possibility of copying beyond the max
allocated size in core caps.
Similar possibilities in fill_raw_fmts and fill_profile_level functions.
Cc: stable@vger.kernel.org
Fixes: 1a73374a04e5 ("media: venus: hfi_parser: add common capability parser")
Signed-off-by: Vikash Garodia <quic_vgarodia@quicinc.com>
Signed-off-by: Stanimir Varbanov <stanimir.k.varbanov@gmail.com>
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
Diffstat (limited to 'tools/testing/radix-tree/linux.c')
0 files changed, 0 insertions, 0 deletions