media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in uvc_parse_streaming. Fixes: c0efd232 ("V4L/DVB (8145a): USB Video Class driver") Signed-off-by:Benoit Sevens <bsevens@google.com> Cc: stable@vger.kernel.org Acked-by:
Greg Kroah-Hartman <gregkh@linuxfoundation.org> Reviewed-by:
Laurent Pinchart <laurent.pinchart@ideasonboard.com> Signed-off-by:
Hans Verkuil <hverkuil@xs4all.nl>
-
mentioned in commit a76ab01e
-
mentioned in commit 70790eb6
-
mentioned in commit 5e2dbc93
-
mentioned in commit da250377
-
mentioned in commit 6b4c73f8
-
mentioned in commit ff5058d4
-
mentioned in commit 9019d889
-
mentioned in commit 869c3e9d
-
mentioned in commit 83008448
-
mentioned in commit cfe97604
-
mentioned in commit bf689beb
-
mentioned in commit 4802a040
-
mentioned in commit 21f95886
-
mentioned in commit 39a89c46
-
mentioned in commit a8c7132e
-
mentioned in commit 56d17d20
-
mentioned in commit a2beb131
-
mentioned in commit 40ab1227
-
mentioned in commit 6ab9b39c
-
mentioned in commit cb948226
-
mentioned in commit 48aaed77
-
mentioned in commit 83d684eb
-
mentioned in commit 87d5340a
-
mentioned in commit e54c279a
-
mentioned in commit 5649d033
-
mentioned in commit 45a08e40
-
mentioned in commit 40a60f83
-
mentioned in commit be055643
-
mentioned in commit f8cfb611
-
mentioned in commit cd68103d
-
mentioned in commit 053ccb5c
-
mentioned in commit ce52cf25
-
mentioned in commit 299ff8e4
-
mentioned in commit 46e24da6
-
mentioned in commit 43054138
-
mentioned in commit 7648c778
-
mentioned in commit 04668a8a
-
mentioned in commit b26f2f6c
-
mentioned in commit 8899cdc7