]> git.ipfire.org Git - thirdparty/linux.git/commitdiff
media: usbtv: Lock resolution while streaming
authorLudwig Disterhof <ludwig@disterhof.eu>
Mon, 28 Apr 2025 18:16:50 +0000 (20:16 +0200)
committerHans Verkuil <hverkuil@xs4all.nl>
Tue, 17 Jun 2025 08:35:14 +0000 (10:35 +0200)
When an program is streaming (ffplay) and another program (qv4l2)
changes the TV standard from NTSC to PAL, the kernel crashes due to trying
to copy to unmapped memory.

Changing from NTSC to PAL increases the resolution in the usbtv struct,
but the video plane buffer isn't adjusted, so it overflows.

Fixes: 0e0fe3958fdd13d ("[media] usbtv: Add support for PAL video source")
Cc: stable@vger.kernel.org
Signed-off-by: Ludwig Disterhof <ludwig@disterhof.eu>
Signed-off-by: Hans Verkuil <hverkuil@xs4all.nl>
[hverkuil: call vb2_is_busy instead of vb2_is_streaming]

drivers/media/usb/usbtv/usbtv-video.c

index be22a9697197c6078981a84b882ec85cd591506c..de0328100a60dd7b4335e208fee4cd2864d5b99d 100644 (file)
@@ -73,6 +73,10 @@ static int usbtv_configure_for_norm(struct usbtv *usbtv, v4l2_std_id norm)
        }
 
        if (params) {
+               if (vb2_is_busy(&usbtv->vb2q) &&
+                   (usbtv->width != params->cap_width ||
+                    usbtv->height != params->cap_height))
+                       return -EBUSY;
                usbtv->width = params->cap_width;
                usbtv->height = params->cap_height;
                usbtv->n_chunks = usbtv->width * usbtv->height