linux-kernel-test/drivers/staging/go7007
Pete Eberlein a716e9d75f [media] go7007: MJPEG buffer overflow
The go7007 driver has a potential buffer overflow and pointer corruption
bug which causes a crash while capturing MJPEG. The motion detection
(MODET) active_map array can be overflowed by JPEG frame data that
emulates a MODET start code. The active_map overflow overwrites the
active_buf pointer, causing a crash.

The JPEG data that emulated MODET start code was being removed from the
output, resulting in garbled JPEG frames. Therefore ignore MODET start
codes when MODET is not enabled.

Signed-off-by: Pete Eberlein <pete@sensoray.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
2010-10-21 01:17:03 -02:00
..
go7007-driver.c [media] go7007: MJPEG buffer overflow 2010-10-21 01:17:03 -02:00
go7007-fw.c Staging: Use kcalloc or kzalloc 2010-05-14 14:02:56 -07:00
go7007-i2c.c
go7007-priv.h V4L/DVB (13455): go7007: Add struct v4l2_device. 2009-12-05 18:42:00 -02:00
go7007-usb.c Staging: Use kcalloc or kzalloc 2010-05-14 14:02:56 -07:00
go7007-v4l2.c V4L/DVB: go7007: convert to use the mediabus API 2010-10-21 01:04:39 -02:00
go7007.h
go7007.txt
Kconfig V4L/DVB: Fix Kconfig dependencies for VIDEO_IR 2010-10-21 01:06:10 -02:00
Makefile V4L/DVB (13456): s2250: Change module structure 2009-12-05 18:42:17 -02:00
README
s2250-board.c V4L/DVB: s2250: remove obsolete v4l2-i2c-drv.h header 2010-10-21 01:06:04 -02:00
s2250-loader.c include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h 2010-03-30 22:02:32 +09:00
s2250-loader.h staging/go7007: Fix compilation by re-adding the missing s2250-loader.h 2009-11-30 17:37:20 -02:00
saa7134-go7007.c Staging: saa7134-go7007: replace dma_sync_single with dma_sync_single_for_cpu 2010-05-27 09:12:52 -07:00
snd-go7007.c include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h 2010-03-30 22:02:32 +09:00
wis-i2c.h
wis-ov7640.c staging: make i2c device id constant 2010-03-03 16:42:42 -08:00
wis-saa7113.c i2c: Remove all i2c_set_clientdata(client, NULL) in drivers 2010-06-03 11:33:58 +02:00
wis-saa7115.c i2c: Remove all i2c_set_clientdata(client, NULL) in drivers 2010-06-03 11:33:58 +02:00
wis-sony-tuner.c i2c: Remove all i2c_set_clientdata(client, NULL) in drivers 2010-06-03 11:33:58 +02:00
wis-tw2804.c i2c: Remove all i2c_set_clientdata(client, NULL) in drivers 2010-06-03 11:33:58 +02:00
wis-tw9903.c i2c: Remove all i2c_set_clientdata(client, NULL) in drivers 2010-06-03 11:33:58 +02:00
wis-uda1342.c staging: make i2c device id constant 2010-03-03 16:42:42 -08:00

Todo:
	- checkpatch.pl cleanups
	- sparse cleanups
	- lots of little modules, should be merged together
	  and added to the build.
	- testing?
	- handle churn in v4l layer.

Please send patchs to Greg Kroah-Hartman <greg@kroah.com> and Cc: Ross
Cohen <rcohen@snurgle.org> as well.