]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
media: videobuf2: forbid remove_bufs when legacy fileio is active
authorMarek Szyprowski <m.szyprowski@samsung.com>
Thu, 23 Oct 2025 14:26:34 +0000 (16:26 +0200)
committerHans Verkuil <hverkuil+cisco@kernel.org>
Fri, 24 Oct 2025 09:16:26 +0000 (11:16 +0200)
commit27afd6e066cfd80ddbe22a4a11b99174ac89cced
treeaa00b8d64fc3bd4ecfeef34b9db95fa270058590
parent758dbc756aad429da11c569c0d067f7fd032bcf7
media: videobuf2: forbid remove_bufs when legacy fileio is active

vb2_ioctl_remove_bufs() call manipulates queue internal buffer list,
potentially overwriting some pointers used by the legacy fileio access
mode. Forbid that ioctl when fileio is active to protect internal queue
state between subsequent read/write calls.

CC: stable@vger.kernel.org
Fixes: a3293a85381e ("media: v4l2: Add REMOVE_BUFS ioctl")
Reported-by: Shuangpeng Bai <SJB7183@psu.edu>
Closes: https://lore.kernel.org/linux-media/5317B590-AAB4-4F17-8EA1-621965886D49@psu.edu/
Signed-off-by: Marek Szyprowski <m.szyprowski@samsung.com>
Signed-off-by: Hans Verkuil <hverkuil+cisco@kernel.org>
drivers/media/common/videobuf2/videobuf2-v4l2.c