Linux Kernel V4L2 Integer Overflow Fix in v4l2-dv-timings

From this webpage screenshot, we can extract the following key information about the vulnerability: 1. Author and Submitter: - Author: Hans Verkuil - Submitter: Mauro Carvalho Chehab 2. Submission Time: - Submitted on: November 16, 2022, at 15:07:22 +0000 3. Submission Content: - Title: media: v4l2-dv-timings.c: fix too strict blanking sanity checks - Description: - Sanity checks were added to the blanking field in v4l2_bt_timings to prevent integer overflow. - However, these checks assumed that userspace would correctly populate the front porch, back porch, and sync values. In some cases, only the total blanking is known, and it is then distributed among these fields. - By setting maximum values for total horizontal and vertical blanking and checking that each field is below that value, integer overflow can be avoided, and greater flexibility is provided. - These changes are signed by Hans Verkuil and Mauro Carvalho Chehab. 4. Modified File: - Filename: drivers/media/v4l2-core/v4l2-dv-timings.c - Changes: - Added sanity checks to prevent integer overflow. - Implemented maximum total horizontal and vertical blanking values, and checked that each field is below the maximum, thus avoiding overflow and increasing flexibility. 5. Diffstat: - File changes: - 1 file changed, 14 insertions, 6 deletions. 6. Diff Content: - The diff shows the modified code lines, primarily focused on adding and adjusting sanity checks. This information indicates that the submission fixes the sanity checks in v4l2-dv-timings to prevent integer overflow and provides greater flexibility.

Goal Reached Thanks to every supporter — we hit 100%!

Linux Kernel V4L2 Integer Overflow Fix in v4l2-dv-timings