]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
media: ccs: Fix CCS static data parsing for large block sizes
authorSakari Ailus <sakari.ailus@linux.intel.com>
Tue, 3 Dec 2024 08:10:23 +0000 (10:10 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 21 Feb 2025 12:49:48 +0000 (13:49 +0100)
commit33da7da2c55ca5d1bd949d345e29d7a9995435d6
treea3ea7e25d16c3c93c955f7e8ad0f7e379c020f97
parent2e33ca528d78089cf5e9f12ea4613bdafb2a853a
media: ccs: Fix CCS static data parsing for large block sizes

commit 82b696750f0b60e7513082a10ad42786854f59f8 upstream.

The length field of the CCS static data blocks was mishandled, leading to
wrong interpretation of the length header for blocks that are 16 kiB in
size. Such large blocks are very, very rare and so this wasn't found
earlier.

As the length is used as part of input validation, the issue has no
security implications.

Fixes: a6b396f410b1 ("media: ccs: Add CCS static data parser library")
Cc: stable@vger.kernel.org
Signed-off-by: Sakari Ailus <sakari.ailus@linux.intel.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/media/i2c/ccs/ccs-data.c