Commit caacdefc authored Aug 13, 2021 by Pavel Skripkin Committed by Greg Kroah-Hartman Nov 26, 2021

media: dvb-usb: fix ununit-value in az6027_rc_query



[ Upstream commit afae4ef7d5ad913cab1316137854a36bea6268a5 ]

Syzbot reported ununit-value bug in az6027_rc_query(). The problem was
in missing state pointer initialization. Since this function does nothing
we can simply initialize state to REMOTE_NO_KEY_PRESSED.

Reported-and-tested-by:  <syzbot+2cd8c5db4a85f0a04142@syzkaller.appspotmail.com>

Fixes: 76f9a820 ("V4L/DVB: AZ6027: Initial import of the driver")
Signed-off-by: Pavel Skripkin <paskripkin@gmail.com>
Signed-off-by: Sean Young <sean@mess.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

parent 7374ddad

drivers/media/usb/dvb-usb/az6027.c

+1 −0

Original line number	Original line	Diff line number	Diff line
	@@ -394,6 +394,7 @@ static struct rc_map_table rc_map_az6027_table[] = {
	/* remote control stuff (does not work with my box) */		/* remote control stuff (does not work with my box) */
	static int az6027_rc_query(struct dvb_usb_device d, u32 event, int *state)		static int az6027_rc_query(struct dvb_usb_device d, u32 event, int *state)
	{		{
			*state = REMOTE_NO_KEY_PRESSED;
	return 0;		return 0;
	}		}