Re: [PATCH] media: videobuf2: Fix integer overrun in vb2_mmap

2021-03-09 Thread Ricardo Ribalda
On Wed, Mar 10, 2021 at 8:47 AM Jiri Slaby wrote: > > On 10. 03. 21, 8:40, Ricardo Ribalda wrote: > > The plane_length is an unsigned integer. So, if we have a size of > > 0x bytes we incorrectly allocate 0 bytes instead of 1 << 32. > > > > Suggested-by: Sergey Senozhatsky > > Cc: sta...@

Re: [PATCH] media: videobuf2: Fix integer overrun in vb2_mmap

2021-03-09 Thread Jiri Slaby
On 10. 03. 21, 8:40, Ricardo Ribalda wrote: The plane_length is an unsigned integer. So, if we have a size of 0x bytes we incorrectly allocate 0 bytes instead of 1 << 32. Suggested-by: Sergey Senozhatsky Cc: sta...@vger.kernel.org Fixes: 7f8414594e47 ("[media] media: videobuf2: fix the

Re: [PATCH] media: videobuf2: Fix integer overrun in vb2_mmap

2021-03-09 Thread Sergey Senozhatsky
On (21/03/10 08:40), Ricardo Ribalda wrote: > > The plane_length is an unsigned integer. So, if we have a size of > 0x bytes we incorrectly allocate 0 bytes instead of 1 << 32. > > Suggested-by: Sergey Senozhatsky > Cc: sta...@vger.kernel.org > Fixes: 7f8414594e47 ("[media] media: videob

[PATCH] media: videobuf2: Fix integer overrun in vb2_mmap

2021-03-09 Thread Ricardo Ribalda
The plane_length is an unsigned integer. So, if we have a size of 0x bytes we incorrectly allocate 0 bytes instead of 1 << 32. Suggested-by: Sergey Senozhatsky Cc: sta...@vger.kernel.org Fixes: 7f8414594e47 ("[media] media: videobuf2: fix the length check for mmap") Signed-off-by: Ricardo