]> www.infradead.org Git - users/jedix/linux-maple.git/commit
media: bcm2835-unicam: Fix for possible dummy buffer overrun
authorNaushir Patuck <naush@raspberrypi.com>
Wed, 27 Nov 2024 11:15:15 +0000 (11:15 +0000)
committerMauro Carvalho Chehab <mchehab+huawei@kernel.org>
Thu, 19 Dec 2024 11:50:18 +0000 (12:50 +0100)
commit7b1ec3e38906224c2b201e3317d2b6c7fdbeff9b
treeb79f1e8a41be1fa330be688bb9c7fbed91d21de6
parent697a252bb2ea414cc1c0b4cf4e3d94a879eaf162
media: bcm2835-unicam: Fix for possible dummy buffer overrun

The Unicam hardware has been observed to cause a buffer overrun when
using the dummy buffer as a circular buffer. The conditions that cause
the overrun are not fully known, but it seems to occur when the memory
bus is heavily loaded.

To avoid the overrun, program the hardware with a buffer size of 0 when
using the dummy buffer. This will cause overrun into the allocated dummy
buffer, but avoid out of bounds writes.

Signed-off-by: Naushir Patuck <naush@raspberrypi.com>
Reviewed-by: Jacopo Mondi <jacopo.mondi@ideasonboard.com>
Signed-off-by: Sakari Ailus <sakari.ailus@linux.intel.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
drivers/media/platform/broadcom/bcm2835-unicam.c