2022-03-25 18:10:12

by Sergey Senozhatsky

Subject: Re: [PATCH] media: dvb_vb2: fix possible out of bound access

On (22/03/24 16:01), Hangyu Hua wrote:
> vb2_core_qbuf and vb2_core_querybuf don't check the range of b->index
> controlled by the user.
>
> Fix this by adding range checking code before using them.
>
> Signed-off-by: Hangyu Hua <[email protected]>

Reviewed-by: Sergey Senozhatsky <[email protected]>

2022-05-16 07:37:13

by Hangyu Hua

Subject: Re: [PATCH] media: dvb_vb2: fix possible out of bound access

On 2022/3/24 18:23, Sergey Senozhatsky wrote:
> On (22/03/24 16:01), Hangyu Hua wrote:
>> vb2_core_qbuf and vb2_core_querybuf don't check the range of b->index
>> controlled by the user.
>>
>> Fix this by adding range checking code before using them.
>>
>> Signed-off-by: Hangyu Hua <[email protected]>
>
> Reviewed-by: Sergey Senozhatsky <[email protected]>

Hi guys,

Two other patches for this module that I submitted at the same time as
this one have been accepted. But this bug looks much worse than the
other two. Is this patch forgotten to merge?

Thanks.