raspi/linux
1
0
Fork 1
mirror of https://github.com/raspberrypi/linux.git synced 2026-01-04 10:21:00 +00:00
Code Issues Projects Releases Wiki Activity
Files
c764da98a600a4b068d25c77164f092f159cecec
linux/drivers/media/i2c
History
Akinobu Mita c764da98a6 media: video-i2c: avoid accessing released memory area when removing driver 
The video device release() callback for video-i2c driver frees the whole
struct video_i2c_data.  If there is no user left for the video device
when video_unregister_device() is called, the release callback is executed.

However, in video_i2c_remove() some fields (v4l2_dev, lock, and queue_lock)
in struct video_i2c_data are still accessed after video_unregister_device()
is called.

This fixes the use after free by moving the code from video_i2c_remove()
to the release() callback.

Fixes: 5cebaac609 ("media: video-i2c: add video-i2c driver")

Reviewed-by: Matt Ranostay <matt.ranostay@konsulko.com>
Signed-off-by: Akinobu Mita <akinobu.mita@gmail.com>
Acked-by: Sakari Ailus <sakari.ailus@linux.intel.com>
Signed-off-by: Hans Verkuil <hverkuil@xs4all.nl>
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>
2018-11-23 04:33:36 -05:00
..
adv748x
media: i2c: adv748x: fix typo in comment for TXB CSI-2 transmitter power down
2018-10-04 14:51:03 -04:00
cx25840
media: rc: Remove init_ir_raw_event and DEFINE_IR_RAW_EVENT macros
2018-10-04 14:22:27 -04:00
et8ek8
media: media/i2c: add missing entity functions
2018-07-25 08:04:00 -04:00
m5mols
media: v4l: i2c: Add a comment not to use static sub-device names in the future
2018-10-03 11:55:44 -04:00
s5c73m3
media: v4l: fwnode: Initialise the V4L2 fwnode endpoints to zero
2018-10-04 16:21:02 -04:00
smiapp
media: smiapp: Query the V4L2 endpoint for a specific bus type
2018-10-04 16:24:25 -04:00
soc_camera
media: rename soc_camera I2C drivers
2018-10-19 08:07:46 -04:00
ad5820.c
media: replace strcpy() by strscpy()
2018-09-11 13:32:17 -04:00
ad9389b.c
media: ad9389b/adv7511: set proper media entity function
2018-07-25 07:51:58 -04:00
adp1653.c
[media] media: Drop FSF's postal address from the source code files
2017-01-27 11:38:09 -02:00
adv7170.c
[media] adv7170: drop redundant ret local
2017-01-30 15:47:05 -02:00
adv7175.c
[media] media: Drop FSF's postal address from the source code files
2017-01-27 11:38:09 -02:00
adv7180.c
media: v4l: mediabus: Recognise CSI-2 D-PHY and C-PHY
2018-10-04 16:06:15 -04:00
adv7183_regs.h
scripts/spelling.txt: add "swithc" pattern and fix typo instances
2017-02-27 18:43:46 -08:00
adv7183.c
[media] media: Drop FSF's postal address from the source code files
2017-01-27 11:38:09 -02:00
adv7343_regs.h
[media] drivers: media: i2c: adv7343_regs.h: Fix typo in #ifndef
2014-09-21 20:12:13 -03:00
adv7343.c
media: fix usage of whitespaces and on indentation
2018-01-04 13:12:01 -05:00
adv7393_regs.h
…
adv7393.c
media: fix usage of whitespaces and on indentation
2018-01-04 13:12:01 -05:00
adv7511.c
media: hdmi.h: rename ADOBE_RGB to OPRGB and ADOBE_YCC to OPYCC
2018-09-24 09:28:41 -04:00
adv7604.c
media: adv7604: when the EDID is cleared, unconfigure CEC as well
2018-10-05 11:23:59 -04:00
adv7842.c
media: adv7842: when the EDID is cleared, unconfigure CEC as well
2018-10-05 11:25:06 -04:00
ak881x.c
media: v4l: Remove support for crop default target in subdev drivers
2018-10-03 11:58:24 -04:00
ak7375.c
media: ak7375: Add ak7375 lens voice coil driver
2018-07-04 07:13:34 -04:00
aptina-pll.c
[media] media: Drop FSF's postal address from the source code files
2017-01-27 11:38:09 -02:00
aptina-pll.h
[media] media: Drop FSF's postal address from the source code files
2017-01-27 11:38:09 -02:00
bt819.c
[media] media: Drop FSF's postal address from the source code files
2017-01-27 11:38:09 -02:00
bt856.c
[media] media: Drop FSF's postal address from the source code files
2017-01-27 11:38:09 -02:00
bt866.c
Replace <asm/uaccess.h> with <linux/uaccess.h> globally
2016-12-24 11:46:01 -08:00
cs53l32a.c
media: use strscpy() instead of strlcpy()
2018-09-11 13:32:17 -04:00
cs3308.c
[media] media/i2c: Delete owner assignment
2016-09-06 16:21:24 -03:00
cs5345.c
[media] media: Drop FSF's postal address from the source code files
2017-01-27 11:38:09 -02:00
dw9714.c
media: dw9714: Remove useless error message
2018-10-08 11:51:05 -04:00
dw9807-vcm.c
media: dw9807-vcm: Fix probe error handling
2018-10-08 11:51:31 -04:00
imx214.c
media: imx214: Add imx214 camera sensor driver
2018-11-06 07:15:12 -05:00
imx258.c
media: imx258: Check the rotation property has a value of 180
2018-06-27 09:49:11 -04:00
imx274.c
media: imx274: switch to SPDX license identifier
2018-09-17 15:15:28 -04:00
imx319.c
media: imx319: fix a few coding style issues
2018-10-05 11:04:09 -04:00
imx355.c
media: imx355: fix a few coding style issues
2018-10-05 11:04:19 -04:00
ir-kbd-i2c.c
media: rc: probe zilog transmitter when zilog receiver is found
2018-05-04 08:22:36 -04:00
Kconfig
media: imx214: Add imx214 camera sensor driver
2018-11-06 07:15:12 -05:00
ks0127.c
media: replace all <spaces><tab> occurrences
2018-01-04 13:15:05 -05:00
ks0127.h
[media] media: Drop FSF's postal address from the source code files
2017-01-27 11:38:09 -02:00
lm3560.c
media: replace strcpy() by strscpy()
2018-09-11 13:32:17 -04:00
lm3646.c
media: replace strcpy() by strscpy()
2018-09-11 13:32:17 -04:00
m52790.c
[media] media: Drop FSF's postal address from the source code files
2017-01-27 11:38:09 -02:00
Makefile
media: imx214: Add imx214 camera sensor driver
2018-11-06 07:15:12 -05:00
max2175.c
media: i2c: max2175: convert to SPDX identifiers
2018-09-12 10:51:18 -04:00
max2175.h
media: i2c: max2175: convert to SPDX identifiers
2018-09-12 10:51:18 -04:00
ml86v7667.c
[media] drivers: media: i2c: ml86v7667: constify v4l2_subdev_* structures
2017-02-03 09:34:43 -02:00
msp3400-driver.c
media: msp3400: declare its own pads
2018-09-17 13:16:19 -04:00
msp3400-driver.h
media: msp3400: declare its own pads
2018-09-17 13:16:19 -04:00
msp3400-kthreads.c
treewide: Align function definition open/close braces
2018-03-26 11:13:09 +02:00
mt9m032.c
media: media/i2c: add missing entity functions
2018-07-25 08:04:00 -04:00
mt9m111.c
media: v4l: Remove support for crop default target in subdev drivers
2018-10-03 11:58:24 -04:00
mt9p031.c
media: media/i2c: add missing entity functions
2018-07-25 08:04:00 -04:00
mt9t001.c
media: media/i2c: add missing entity functions
2018-07-25 08:04:00 -04:00
mt9t112.c
media: v4l: Remove support for crop default target in subdev drivers
2018-10-03 11:58:24 -04:00
mt9v011.c
media: convert g/s_parm to g/s_frame_interval in subdevs
2018-02-22 12:27:35 -05:00
mt9v032.c
media: v4l: fwnode: Initialise the V4L2 fwnode endpoints to zero
2018-10-04 16:21:02 -04:00
mt9v111.c
media: i2c: mt9v111: Fix v4l2-ctrl error handling
2018-09-10 12:13:41 -04:00
noon010pc30.c
media: v4l: i2c: Add a comment not to use static sub-device names in the future
2018-10-03 11:55:44 -04:00
ov772x.c
media: v4l: Remove support for crop default target in subdev drivers
2018-10-03 11:58:24 -04:00
ov2640.c
media: v4l: Remove support for crop default target in subdev drivers
2018-10-03 11:58:24 -04:00
ov2659.c
media: v4l: fwnode: Let the caller provide V4L2 fwnode endpoint
2018-10-04 16:08:09 -04:00
ov2680.c
media: ov2680: rename ov2680_v4l2_init() to ov2680_v4l2_register()
2018-09-17 15:19:59 -04:00
ov2685.c
media: i2c: Fix pm_runtime_get_if_in_use() usage in sensor drivers
2018-08-31 09:23:53 -04:00
ov5640.c
media: ov5640: fix framerate update
2018-10-05 11:04:39 -04:00
ov5645.c
media: ov5645: constify v4l2_ctrl_ops structure
2018-11-06 07:16:38 -05:00
ov5647.c
media: v4l: fwnode: Initialise the V4L2 fwnode endpoints to zero
2018-10-04 16:21:02 -04:00
ov5670.c
media: i2c: Fix pm_runtime_get_if_in_use() usage in sensor drivers
2018-08-31 09:23:53 -04:00
ov5695.c
media: i2c: Fix pm_runtime_get_if_in_use() usage in sensor drivers
2018-08-31 09:23:53 -04:00
ov6650.c
media: v4l: Remove support for crop default target in subdev drivers
2018-10-03 11:58:24 -04:00
ov7251.c
media: v4l: mediabus: Recognise CSI-2 D-PHY and C-PHY
2018-10-04 16:06:15 -04:00
ov7640.c
[media] media: Drop FSF's postal address from the source code files
2017-01-27 11:38:09 -02:00
ov7670.c
media: ov7670: make "xclk" clock optional
2018-10-05 11:04:39 -04:00
ov7740.c
media: ov7740: constify structures stored in fields of v4l2_subdev_ops structure
2018-11-06 07:17:02 -05:00
ov9650.c
media: ov9650: avoid maybe-uninitialized warnings
2018-10-05 11:04:39 -04:00
ov13858.c
media: ov13858: Check for possible null pointer
2018-11-06 07:15:53 -05:00
rj54n1cb0c.c
media: v4l: Remove support for crop default target in subdev drivers
2018-10-03 11:58:24 -04:00
s5k4ecgx.c
media: v4l: i2c: Add a comment not to use static sub-device names in the future
2018-10-03 11:55:44 -04:00
s5k5baf.c
media: v4l: fwnode: Initialise the V4L2 fwnode endpoints to zero
2018-10-04 16:21:02 -04:00
s5k6a3.c
media: s5k6a3: document some fields at struct s5k6a3
2017-11-30 04:18:57 -05:00
s5k6aa.c
media: v4l: mediabus: Recognise CSI-2 D-PHY and C-PHY
2018-10-04 16:06:15 -04:00
saa711x_regs.h
MAINTAINERS & files: Canonize the e-mails I use at files
2018-05-04 06:21:06 -04:00
saa717x.c
media: replace all <spaces><tab> occurrences
2018-01-04 13:15:05 -05:00
saa6588.c
[poll] annotate SAA6588_CMD_POLL users
2018-02-15 13:11:48 -05:00
saa6752hs.c
media: replace all <spaces><tab> occurrences
2018-01-04 13:15:05 -05:00
saa7110.c
[media] media: Drop FSF's postal address from the source code files
2017-01-27 11:38:09 -02:00
saa7115.c
media: saa7115: declare its own pads
2018-09-17 13:16:19 -04:00
saa7127.c
media: use strscpy() instead of strlcpy()
2018-09-11 13:32:17 -04:00
saa7185.c
[media] media: Drop FSF's postal address from the source code files
2017-01-27 11:38:09 -02:00
smiapp-pll.c
[media] smiapp-pll: Don't complain aloud about failing PLL calculation
2016-10-21 15:15:06 -02:00
smiapp-pll.h
[media] smiapp-pll: include linux/device.h in smiapp-pll.c, not in smiapp-pll.h
2014-12-23 11:29:01 -02:00
sony-btf-mpx.c
[media] media: Drop FSF's postal address from the source code files
2017-01-27 11:38:09 -02:00
sr030pc30.c
media: sr030pc30: remove NULL in sr030pc30_base_config()
2018-09-17 15:19:10 -04:00
tc358743_regs.h
media: i2c: add SPDX license info
2018-02-14 13:16:31 -05:00
tc358743.c
media: tc358743: Remove unnecessary self assignment
2018-11-06 05:19:49 -05:00
tda1997x_regs.h
media: i2c: Add TDA1997x HDMI receiver driver
2018-02-22 12:53:32 -05:00
tda1997x.c
media: v4l: fwnode: Initialise the V4L2 fwnode endpoints to zero
2018-10-04 16:21:02 -04:00
tda7432.c
MAINTAINERS & files: Canonize the e-mails I use at files
2018-05-04 06:21:06 -04:00
tda9840.c
media: tda9840: cleanup a warning
2018-03-23 07:48:08 -04:00
tea6415c.c
[media] i2c: Drop owner assignment from i2c_driver
2015-08-11 13:00:15 -03:00
tea6415c.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
tea6420.c
[media] i2c: Drop owner assignment from i2c_driver
2015-08-11 13:00:15 -03:00
tea6420.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
ths7303.c
media: replace all <spaces><tab> occurrences
2018-01-04 13:15:05 -05:00
ths8200_regs.h
[media] media: i2c: ths8200: driver for TI video encoder
2013-06-17 09:52:31 -03:00
ths8200.c
media: ths8200: constify i2c_device_id
2017-08-26 08:43:40 -04:00
tlv320aic23b.c
[media] media: Drop FSF's postal address from the source code files
2017-01-27 11:38:09 -02:00
tvaudio.c
media: use strscpy() instead of strlcpy()
2018-09-11 13:32:17 -04:00
tvp514x_regs.h
[media] media: Drop FSF's postal address from the source code files
2017-01-27 11:38:09 -02:00
tvp514x.c
media: v4l: fwnode: Initialise the V4L2 fwnode endpoints to zero
2018-10-04 16:21:02 -04:00
tvp5150_reg.h
media: tvp5150: Add sync lock interrupt handling
2018-09-17 13:30:28 -04:00
tvp5150.c
media: v4l: fwnode: Initialise the V4L2 fwnode endpoints to zero
2018-10-04 16:21:02 -04:00
tvp7002_reg.h
MAINTAINERS & files: Canonize the e-mails I use at files
2018-05-04 06:21:06 -04:00
tvp7002.c
media: v4l: fwnode: Initialise the V4L2 fwnode endpoints to zero
2018-10-04 16:21:02 -04:00
tw2804.c
[media] media: Drop FSF's postal address from the source code files
2017-01-27 11:38:09 -02:00
tw9903.c
[media] media: Drop FSF's postal address from the source code files
2017-01-27 11:38:09 -02:00
tw9906.c
[media] media: Drop FSF's postal address from the source code files
2017-01-27 11:38:09 -02:00
tw9910.c
media: tw9910: Replace msleep(1) with usleep_range
2018-03-06 11:57:16 -05:00
uda1342.c
[media] media: Drop FSF's postal address from the source code files
2017-01-27 11:38:09 -02:00
upd64031a.c
[media] media: Drop FSF's postal address from the source code files
2017-01-27 11:38:09 -02:00
upd64083.c
[media] media: Drop FSF's postal address from the source code files
2017-01-27 11:38:09 -02:00
video-i2c.c
media: video-i2c: avoid accessing released memory area when removing driver
2018-11-23 04:33:36 -05:00
vp27smpx.c
[media] media: Drop FSF's postal address from the source code files
2017-01-27 11:38:09 -02:00
vpx3220.c
media: replace all <spaces><tab> occurrences
2018-01-04 13:15:05 -05:00
vs6624_regs.h
[media] media: Drop FSF's postal address from the source code files
2017-01-27 11:38:09 -02:00
vs6624.c
media: i2c: vs6624: Replace mdelay() with msleep() and usleep_range() in vs6624_probe()
2018-07-27 08:11:57 -04:00
wm8739.c
[media] media: Drop FSF's postal address from the source code files
2017-01-27 11:38:09 -02:00
wm8775.c
[media] media: Drop FSF's postal address from the source code files
2017-01-27 11:38:09 -02:00