media: drivers/media/dvb-core: copy user arrays safely
authorPhilipp Stanner <pstanner@redhat.com>
Thu, 2 Nov 2023 19:16:34 +0000 (20:16 +0100)
committerMauro Carvalho Chehab <mchehab@kernel.org>
Wed, 7 Feb 2024 04:35:54 +0000 (05:35 +0100)
commit102fb77c2deb0df3683ef8ff7a6f4cf91dc456e2
tree27d2b284de402bc4e4ee0490a571d8d550249da0
parent8f667d2023844f3a2631c686f970b2f04c7fe7ec
media: drivers/media/dvb-core: copy user arrays safely

At several positions in dvb_frontend.c, memdup_user() is utilized to
copy userspace arrays. This is done without overflow checks.

Use the new wrapper memdup_array_user() to copy the arrays more safely.

Link: https://lore.kernel.org/linux-media/20231102191633.52592-2-pstanner@redhat.com
Suggested-by: Dave Airlie <airlied@redhat.com>
Signed-off-by: Philipp Stanner <pstanner@redhat.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@kernel.org>
drivers/media/dvb-core/dvb_frontend.c