BACKPORT: media: venus: hfi: add checks in capabilities from firmware
The hfi parser, parses the capabilities received from venus firmware and copies them to core capabilities. Consider below api, for example, fill_caps - In this api, caps in core structure gets updated with the number of capabilities received in firmware data payload. If the same api is called multiple times, there is a possibility of copying beyond the max allocated size in core caps. Similar possibilities in fill_raw_fmts and fill_profile_level functions. commit 8d0b89398b7e ("media: venus: hfi: add checks to handle capabilities from firmware"). Change-Id: Ib34d6d8dd77b3997bbbc7a25376b658dbcb6bac6 Cc: stable@vger.kernel.org Fixes: 1a73374a ("media: venus: hfi_parser: add common capability parser") Signed-off-by:Stanimir Varbanov <stanimir.k.varbanov@gmail.com> Signed-off-by:
Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by:
Vikash Garodia <quic_vgarodia@quicinc.com>
Loading
Please register or sign in to comment