diff options
| author | Sean Young | 2018-07-28 11:11:15 +0200 |
|---|---|---|
| committer | Mauro Carvalho Chehab | 2018-07-30 14:19:53 +0200 |
| commit | f5dbee6e3881b1dbfdcc36008d48bd29549ab2f4 (patch) | |
| tree | 0c40f47cfe5fd713d664009851b11b0439f094ad /drivers/media/platform | |
| parent | media: bpf: ensure bpf program is freed on detach (diff) | |
| download | kernel-qcow2-linux-f5dbee6e3881b1dbfdcc36008d48bd29549ab2f4.tar.gz kernel-qcow2-linux-f5dbee6e3881b1dbfdcc36008d48bd29549ab2f4.tar.xz kernel-qcow2-linux-f5dbee6e3881b1dbfdcc36008d48bd29549ab2f4.zip | |
media: rc: read out of bounds if bpf reports high protocol number
The repeat period is read from a static array. If a keydown event is
reported from bpf with a high protocol number, we read out of bounds. This
is unlikely to end up with a reasonable repeat period at the best of times,
in which case no timely key up event is generated.
Signed-off-by: Sean Young <sean@mess.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>
Diffstat (limited to 'drivers/media/platform')
0 files changed, 0 insertions, 0 deletions