summaryrefslogtreecommitdiffstats
path: root/Documentation/SecurityBugs
diff options
context:
space:
mode:
authorFrancesco Lavra <francescolavra@interfree.it>2010-02-07 09:49:58 -0300
committerMauro Carvalho Chehab <mchehab@redhat.com>2010-02-08 10:47:17 -0200
commit691c9ae099b9bcb5c27125af00a4a90120977458 (patch)
treef3f5831d28102f852dda0abbc75d7e7b2bfd9506 /Documentation/SecurityBugs
parentbc081cc8693800ebb118cc2cc6a859dd0b45921b (diff)
downloadlinux-691c9ae099b9bcb5c27125af00a4a90120977458.tar.bz2
V4L/DVB: dvb-core: fix initialization of feeds list in demux filter
A DVB demultiplexer device can be used to set up either a PES filter or a section filter. In the former case, the ts field of the feed union of struct dmxdev_filter is used, in the latter case the sec field of the same union is used. The ts field is a struct list_head, and is currently initialized in the open() method of the demux device. When for a given demuxer a section filter is set up, the sec field is played with, thus if a PES filter needs to be set up after that the ts field will be corrupted, causing a kernel oops. This fix moves the list head initialization to dvb_dmxdev_pes_filter_set(), so that the ts field is properly initialized every time a PES filter is set up. Signed-off-by: Francesco Lavra <francescolavra@interfree.it> Cc: stable <stable@kernel.org> Reviewed-by: Andy Walls <awalls@radix.net> Tested-by: hermann pitton <hermann-pitton@arcor.de> Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
Diffstat (limited to 'Documentation/SecurityBugs')
0 files changed, 0 insertions, 0 deletions