BACKPORT: media: venus: hfi: add checks in capabilities from firmware
The hfi parser, parses the capabilities received from venus firmware and
copies them to core capabilities. Consider below api, for example,
fill_caps - In this api, caps in core structure gets updated with the
number of capabilities received in firmware data payload. If the same api
is called multiple times, there is a possibility of copying beyond the max
allocated size in core caps.
Similar possibilities in fill_raw_fmts and fill_profile_level functions.
commit 8d0b89398b7e ("media: venus: hfi: add checks to handle capabilities
from firmware").
Change-Id: Ib34d6d8dd77b3997bbbc7a25376b658dbcb6bac6
Cc: stable@vger.kernel.org
Fixes: 1a73374a ("media: venus: hfi_parser: add common capability parser")
Signed-off-by:
Stanimir Varbanov <stanimir.k.varbanov@gmail.com>
Signed-off-by:
Hans Verkuil <hverkuil-cisco@xs4all.nl>
Signed-off-by:
Vikash Garodia <quic_vgarodia@quicinc.com>
Loading
Please register or sign in to comment