Mauro Carvalho Chehab d382c5be4c media: dvb_ca_en50221: avoid speculation from CA slot ...

As warned by smatch:
	drivers/media/dvb-core/dvb_ca_en50221.c:1392 dvb_ca_en50221_io_do_ioctl() warn: potential spectre issue 'ca->slot_info' [r] (local cap)

There's a potential of using a CAM ioctl for speculation.

The risk here is minimum, as only a small subset of DVB
boards have CI, with a CAM module installed. Also, exploiting
it would require a user capable of starting a DVB application.

There are probably a lot of easier ways to try to exploit.

Yet, it doesn't harm addressing it.

Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>

2021-06-17 09:24:10 +02:00

..

dmxdev.c

media: dmxdev: change the check for problems allocing secfeed

2021-06-09 14:45:20 +02:00

dvb_ca_en50221.c

media: dvb_ca_en50221: avoid speculation from CA slot

2021-06-17 09:24:10 +02:00

dvb_demux.c

media: dvb-core: Fix receiving invalid EIT-sections

2020-01-08 11:46:34 +01:00

dvb_frontend.c

media: dvb_frontend: warn if frontend driver has API issues

2021-03-22 16:38:51 +01:00

dvb_math.c

media: move dvb kAPI headers to include/media

2017-12-28 13:16:01 -05:00

dvb_net.c

treewide: Use fallthrough pseudo-keyword

2020-08-23 17:36:59 -05:00

dvb_ringbuffer.c

docs: Fix some broken references

2018-06-15 18:10:01 -03:00

dvb_vb2.c

media: media/v4l2: remove V4L2_FLAG_MEMORY_NON_CONSISTENT flag

2020-09-14 15:28:06 +02:00

dvbdev.c

media: dvbdev: Fix memory leak in dvb_media_device_free()

2021-03-22 23:36:39 +01:00

Kconfig

media: Kconfig: move DVB-specific options to dvb-core/Kconfig

2020-04-14 10:29:05 +02:00

Makefile

media: dvb: fix DVB_MMAP symbol name

2018-02-23 05:20:01 -05:00