Hi Linus,
Please pull from:
git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media tags/media/v6.12-2
For:
- dvb-core fixes at vb2 check and at device registration;
- v4l2-core: fix an issue with error handling for VIDIOC_G_CTRL;
- vb2 core: fix an issue at vb plane copy logic;
- videobuf2-core: copy vb planes unconditionally;
- vivid: fix buffer overwrite when using > 32 buffers;
- vivid: fix a potential division by zero due to an issue at v4l2-tpg;
- some spectre vulnerability fixes;
- several OOM access fixes;
- some buffer overflow fixes.
Regards,
Mauro
---
The following changes since commit 9852d85ec9d492ebef56dc5f229416c925758edc:
Linux 6.12-rc1 (2024-09-29 15:06:19 -0700)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media tags/media/v6.12-2
for you to fetch changes up to 702a47ce6dde72f6e247b3c3c00a0fc521f9b1c6:
media: videobuf2-core: copy vb planes unconditionally (2024-11-07 12:55:46 +0100)
----------------------------------------------------------------
media fixes for v6.12-rc7
----------------------------------------------------------------
Hans Verkuil (2):
media: dvb-core: add missing buffer index check
media: vivid: fix buffer overwrite when using > 32 buffers
Mauro Carvalho Chehab (14):
media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
media: v4l2-tpg: prevent the risk of a division by zero
media: dvbdev: prevent the risk of out of memory access
media: dvb_frontend: don't play tricks with underflow values
media: mgb4: protect driver against spectre
media: av7110: fix a spectre vulnerability
media: s5p-jpeg: prevent buffer overflows
media: ar0521: don't overflow when checking PLL values
media: cx24116: prevent overflows on SNR calculus
media: adv7604: prevent underflow condition when reporting colorspace
media: stb0899_algo: initialize cfr before using it
media: cec: extron-da-hd-4k-plus: don't use -1 as an error code
media: pulse8-cec: fix data timestamp at pulse8_setup()
media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
Tudor Ambarus (1):
media: videobuf2-core: copy vb planes unconditionally
.../extron-da-hd-4k-plus/extron-da-hd-4k-plus.c | 6 ++---
drivers/media/cec/usb/pulse8/pulse8-cec.c | 2 +-
drivers/media/common/v4l2-tpg/v4l2-tpg-core.c | 3 +++
drivers/media/common/videobuf2/videobuf2-core.c | 28 ++++++++++++----------
drivers/media/dvb-core/dvb_frontend.c | 4 ++--
drivers/media/dvb-core/dvb_vb2.c | 8 ++++++-
drivers/media/dvb-core/dvbdev.c | 16 +++++++++----
drivers/media/dvb-frontends/cx24116.c | 7 +++++-
drivers/media/dvb-frontends/stb0899_algo.c | 2 +-
drivers/media/i2c/adv7604.c | 26 +++++++++++++-------
drivers/media/i2c/ar0521.c | 4 ++--
drivers/media/pci/mgb4/mgb4_cmt.c | 2 ++
.../media/platform/samsung/s5p-jpeg/jpeg-core.c | 17 ++++++++-----
drivers/media/test-drivers/vivid/vivid-core.c | 2 +-
drivers/media/test-drivers/vivid/vivid-core.h | 4 +++-
drivers/media/test-drivers/vivid/vivid-ctrls.c | 2 +-
drivers/media/test-drivers/vivid/vivid-vid-cap.c | 2 +-
drivers/media/v4l2-core/v4l2-ctrls-api.c | 17 ++++++++-----
drivers/staging/media/av7110/av7110.h | 4 +++-
drivers/staging/media/av7110/av7110_ca.c | 25 ++++++++++++-------
20 files changed, 118 insertions(+), 63 deletions(-)
