Re: [RFC,PATCH] VIDIOC_G_EXT_CTRLS does not handle NULL pointer correctly

2009-12-10 Thread Laurent Pinchart
Hi Mauro, On Wednesday 10 June 2009 23:58:31 Laurent Pinchart wrote: On Wednesday 10 June 2009 15:53:57 Mauro Carvalho Chehab wrote: Em Wed, 10 Jun 2009 10:52:28 -0300 Mauro Carvalho Chehab mche...@infradead.org escreveu: Em Mon, 25 May 2009 11:16:34 -0300 Mauro Carvalho Chehab

Re: [RFC,PATCH] VIDIOC_G_EXT_CTRLS does not handle NULL pointer correctly

2009-12-10 Thread Németh Márton
Laurent Pinchart wrote: Hi Mauro, On Wednesday 10 June 2009 23:58:31 Laurent Pinchart wrote: On Wednesday 10 June 2009 15:53:57 Mauro Carvalho Chehab wrote: Em Wed, 10 Jun 2009 10:52:28 -0300 Mauro Carvalho Chehab mche...@infradead.org escreveu: Em Mon, 25 May 2009 11:16:34 -0300 Mauro

Re: [RFC,PATCH] VIDIOC_G_EXT_CTRLS does not handle NULL pointer correctly

2009-06-10 Thread Mauro Carvalho Chehab
Em Mon, 25 May 2009 11:16:34 -0300 Mauro Carvalho Chehab mche...@infradead.org escreveu: Em Mon, 25 May 2009 13:17:02 +0200 Laurent Pinchart laurent.pinch...@skynet.be escreveu: Hi everybody, Márton Németh found an integer overflow bug in the extended control ioctl handling code.

Re: [RFC,PATCH] VIDIOC_G_EXT_CTRLS does not handle NULL pointer correctly

2009-06-10 Thread Mauro Carvalho Chehab
Em Wed, 10 Jun 2009 10:52:28 -0300 Mauro Carvalho Chehab mche...@infradead.org escreveu: Em Mon, 25 May 2009 11:16:34 -0300 Mauro Carvalho Chehab mche...@infradead.org escreveu: Em Mon, 25 May 2009 13:17:02 +0200 Laurent Pinchart laurent.pinch...@skynet.be escreveu: Hi everybody,

Re: [RFC,PATCH] VIDIOC_G_EXT_CTRLS does not handle NULL pointer correctly

2009-06-10 Thread Németh Márton
Mauro Carvalho Chehab wrote: Em Wed, 10 Jun 2009 10:52:28 -0300 Mauro Carvalho Chehab mche...@infradead.org escreveu: Em Mon, 25 May 2009 11:16:34 -0300 Mauro Carvalho Chehab mche...@infradead.org escreveu: Em Mon, 25 May 2009 13:17:02 +0200 Laurent Pinchart laurent.pinch...@skynet.be

Re: [RFC,PATCH] VIDIOC_G_EXT_CTRLS does not handle NULL pointer correctly

2009-06-10 Thread Laurent Pinchart
On Wednesday 10 June 2009 15:53:57 Mauro Carvalho Chehab wrote: Em Wed, 10 Jun 2009 10:52:28 -0300 Mauro Carvalho Chehab mche...@infradead.org escreveu: Em Mon, 25 May 2009 11:16:34 -0300 Mauro Carvalho Chehab mche...@infradead.org escreveu: Em Mon, 25 May 2009 13:17:02 +0200

Re: [RFC,PATCH] VIDIOC_G_EXT_CTRLS does not handle NULL pointer correctly

2009-05-28 Thread Németh Márton
Laurent Pinchart worte: Could a very large number of control requests be used as a DoS attack vector ? A userspace application could kmalloc large amounts of memory without any restriction. Memory would be reclaimed eventually, but after performing a large number of USB requests, which

Re: [RFC,PATCH] VIDIOC_G_EXT_CTRLS does not handle NULL pointer correctly

2009-05-27 Thread Laurent Pinchart
On Monday 25 May 2009 21:22:06 Trent Piepho wrote: On Mon, 25 May 2009, Laurent Pinchart wrote: diff -r e0d881b21bc9 linux/drivers/media/video/v4l2-ioctl.c --- a/linux/drivers/media/video/v4l2-ioctl.cTue May 19 15:12:17 2009 +0200 +++ b/linux/drivers/media/video/v4l2-ioctl.c Sun

Re: [RFC, PATCH] VIDIOC_G_EXT_CTRLS does not handle NULL pointer correctly

2009-05-27 Thread Hans Verkuil
On Monday 25 May 2009 21:22:06 Trent Piepho wrote: On Mon, 25 May 2009, Laurent Pinchart wrote: diff -r e0d881b21bc9 linux/drivers/media/video/v4l2-ioctl.c --- a/linux/drivers/media/video/v4l2-ioctl.c Tue May 19 15:12:17 2009 +0200 +++ b/linux/drivers/media/video/v4l2-ioctl.c Sun

Re: [RFC,PATCH] VIDIOC_G_EXT_CTRLS does not handle NULL pointer correctly

2009-05-25 Thread Mauro Carvalho Chehab
Em Mon, 25 May 2009 13:17:02 +0200 Laurent Pinchart laurent.pinch...@skynet.be escreveu: Hi everybody, Márton Németh found an integer overflow bug in the extended control ioctl handling code. This affects both video_usercopy and video_ioctl2. See

Re: [RFC,PATCH] VIDIOC_G_EXT_CTRLS does not handle NULL pointer correctly

2009-05-25 Thread Trent Piepho
On Mon, 25 May 2009, Laurent Pinchart wrote: diff -r e0d881b21bc9 linux/drivers/media/video/v4l2-ioctl.c --- a/linux/drivers/media/video/v4l2-ioctl.c Tue May 19 15:12:17 2009 +0200 +++ b/linux/drivers/media/video/v4l2-ioctl.c Sun May 24 18:26:29 2009 +0200 @@ -402,6 +402,10 @@