]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
media: ccs: Fix CCS static data parsing for large block sizes
authorSakari Ailus <sakari.ailus@linux.intel.com>
Tue, 3 Dec 2024 08:10:23 +0000 (10:10 +0200)
committerMauro Carvalho Chehab <mchehab+huawei@kernel.org>
Thu, 19 Dec 2024 11:50:13 +0000 (12:50 +0100)
commit82b696750f0b60e7513082a10ad42786854f59f8
treea6cc0a749eb65d3fabb58f1d54c8862ee63f7423
parent11f68d2ba2e1521a608af773bf788e8cfa260f68
media: ccs: Fix CCS static data parsing for large block sizes

The length field of the CCS static data blocks was mishandled, leading to
wrong interpretation of the length header for blocks that are 16 kiB in
size. Such large blocks are very, very rare and so this wasn't found
earlier.

As the length is used as part of input validation, the issue has no
security implications.

Fixes: a6b396f410b1 ("media: ccs: Add CCS static data parser library")
Cc: stable@vger.kernel.org
Signed-off-by: Sakari Ailus <sakari.ailus@linux.intel.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
drivers/media/i2c/ccs/ccs-data.c