FROMGIT: media: venus: hfi_parser: add check to avoid out of bound access
There is a possibility that init_codecs is invoked multiple times during manipulated payload from video firmware. In such case, if codecs_count can get incremented to value more than MAX_CODEC_NUM, there can be OOB access. Reset the count so that it always starts from beginning. Cc: stable@vger.kernel.org Fixes: 1a73374a ("media: venus: hfi_parser: add common capability parser") Reviewed-by:Bryan O'Donoghue <bryan.odonoghue@linaro.org> CRs-Fixed: 3935643 Change-Id: I6216e773af65082e4775b415789ffd549e0bed2d Git-commit: 172bf5a9 Git-repo: https://gitlab.freedesktop.org/linux-media/media-committers.git Signed-off-by:
Vikash Garodia <quic_vgarodia@quicinc.com>
Loading
Please register or sign in to comment