Re: [PATCH v2] [media] uvcvideo: Prevent heap overflow in uvc driver

2017-07-11 Thread Laurent Pinchart
Hi Guenter, Thank you for the patch and sorry for the late reply. On Friday 30 Jun 2017 09:21:56 Guenter Roeck wrote: > The size of uvc_control_mapping is user controlled leading to a > potential heap overflow in the uvc driver. This adds a check to verify > the user provided size fits within

Re: [PATCH v2] [media] uvcvideo: Prevent heap overflow in uvc driver

2017-07-11 Thread Guenter Roeck
Any comments / feedback ? Thanks, Guenter On Fri, Jun 30, 2017 at 09:21:56AM -0700, Guenter Roeck wrote: > The size of uvc_control_mapping is user controlled leading to a > potential heap overflow in the uvc driver. This adds a check to verify > the user provided size fits within the bounds of

Re: [PATCH v2] [media] uvcvideo: Prevent heap overflow in uvc driver

2017-07-06 Thread Guenter Roeck
On Fri, Jun 30, 2017 at 09:21:56AM -0700, Guenter Roeck wrote: > The size of uvc_control_mapping is user controlled leading to a > potential heap overflow in the uvc driver. This adds a check to verify > the user provided size fits within the bounds of the defined buffer > size. > >

[PATCH v2] [media] uvcvideo: Prevent heap overflow in uvc driver

2017-06-30 Thread Guenter Roeck
The size of uvc_control_mapping is user controlled leading to a potential heap overflow in the uvc driver. This adds a check to verify the user provided size fits within the bounds of the defined buffer size. Originally-from: Richard Simmons Signed-off-by: Guenter Roeck

Re: [media] uvcvideo: Prevent heap overflow in uvc driver

2017-06-28 Thread Guenter Roeck
On Wed, Jun 28, 2017 at 09:18:37PM +0300, Laurent Pinchart wrote: > Hi Guenter, > > On Wednesday 28 Jun 2017 20:59:17 Laurent Pinchart wrote: > > On Wednesday 28 Jun 2017 07:36:43 Guenter Roeck wrote: > > > On Mon, May 22, 2017 at 12:48:04PM -0700, Guenter Roeck wrote: > > >> From: Robb Glasser

Re: [media] uvcvideo: Prevent heap overflow in uvc driver

2017-06-28 Thread Laurent Pinchart
Hi Guenter, On Wednesday 28 Jun 2017 20:59:17 Laurent Pinchart wrote: > On Wednesday 28 Jun 2017 07:36:43 Guenter Roeck wrote: > > On Mon, May 22, 2017 at 12:48:04PM -0700, Guenter Roeck wrote: > >> From: Robb Glasser > >> > >> The size of uvc_control_mapping is user

Re: [media] uvcvideo: Prevent heap overflow in uvc driver

2017-06-28 Thread Laurent Pinchart
Hi Guenter, On Wednesday 28 Jun 2017 07:36:43 Guenter Roeck wrote: > On Mon, May 22, 2017 at 12:48:04PM -0700, Guenter Roeck wrote: > > From: Robb Glasser > > > > The size of uvc_control_mapping is user controlled leading to a > > potential heap overflow in the uvc driver.

Re: [media] uvcvideo: Prevent heap overflow in uvc driver

2017-06-28 Thread Guenter Roeck
On Mon, May 22, 2017 at 12:48:04PM -0700, Guenter Roeck wrote: > From: Robb Glasser > > The size of uvc_control_mapping is user controlled leading to a > potential heap overflow in the uvc driver. This adds a check to verify > the user provided size fits within the bounds of

[PATCH] [media] uvcvideo: Prevent heap overflow in uvc driver

2017-05-22 Thread Guenter Roeck
From: Robb Glasser The size of uvc_control_mapping is user controlled leading to a potential heap overflow in the uvc driver. This adds a check to verify the user provided size fits within the bounds of the defined buffer size. Signed-off-by: Robb Glasser