* Re: [PATCH] staging: atomisp: fix heap buffer overflow in framebuffer conversion
[not found] ` <OlBwH9n--F-9@tutanota.com>
@ 2026-02-27 23:58 ` Sakari Ailus
0 siblings, 0 replies; only message in thread
From: Sakari Ailus @ 2026-02-27 23:58 UTC (permalink / raw)
To: soufianeda
Cc: Linux Media, Linux Staging, Gregkh, Johannes Goede, Andy,
Dan Carpenter
Hi Soufiane,
On Wed, Feb 11, 2026 at 02:43:17PM +0100, soufianeda@tutanota.com wrote:
>
> Hi Sakari,
>
> I agree that removing the private IOCTL handler is the better
> approach. While fuzzing the driver I found the same class of
> unchecked user-controlled size fields in several other handlers
> (ATOMISP_IOC_S_DIS_VECTOR, morph table, shading table), so
> removing atomisp_vidioc_default() eliminates all of them at once.
>
> I'm cool with sending a patch removing atomisp_vidioc_default() as
> Hans suggested, if that would be helpful.
Oops. I read your message after posting the patch...
Indeed it sounds like we should disable all private IOCTLs, also the only
one that should have been there to begin with. (I can update my patch as
well.)
--
Kind regards,
Sakari Ailus
^ permalink raw reply [flat|nested] only message in thread