]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
media: chips-media: wave5: Add range checks for dec_output_info
authorRicardo Ribalda <ribalda@chromium.org>
Thu, 7 May 2026 20:58:09 +0000 (20:58 +0000)
committerHans Verkuil <hverkuil+cisco@kernel.org>
Tue, 12 May 2026 07:39:02 +0000 (09:39 +0200)
commit79aef69bb0903616f4867f0168aea717a11c439c
treed60d8a85db1cd8b01a49178bd7d7759a8be392e4
parentddf9d68a368d8cae5510923a99bd2d9a7275a091
media: chips-media: wave5: Add range checks for dec_output_info

If the driver's dec_output_info contains invalid data the driver can
write in invalid memory. Add a range check for that.

This fixes this smatch error:
drivers/media/platform/chips-media/wave5/wave5-vpuapi.c:588 wave5_vpu_dec_get_output_info() error: buffer overflow 'inst->frame_buf' 64 <= 127

Signed-off-by: Ricardo Ribalda <ribalda@chromium.org>
Reviewed-by: Nicolas Dufresne <nicolas.dufresne@collabora.com>
Signed-off-by: Hans Verkuil <hverkuil+cisco@kernel.org>
drivers/media/platform/chips-media/wave5/wave5-vpuapi.c