averello/linux-stable-mirror
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2026-07-08 18:13:59 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
a2670d24efbbcb0d8ed2fca85b04451c63243f63
linux-stable-mirror/drivers/media/dvb-frontends
T
History
Sergey Shtylyov 7dcbc1cee7 media: dib8000: avoid division by 0 in dib8000_set_dds() 
commit dde3c37af9 upstream.

In dib8000_set_dds(), 1 << 26 (67108864) divided by e.g. 1 apparently can't
fit into 16-bit variable unit_khz_dds_val, being truncated to 0; this will
cause division by 0 while calling dprintk() with debugging enabled (via the
module parameter).  Use s32 instead of s16 to declare the variable, getting
rid of the cast to u16 in the *else* branch as well...

Found by Linux Verification Center (linuxtesting.org) with the Svace static
analysis tool.

Fixes: 173a64cb3f ("[media] dib8000: enhancement")
Cc: stable@vger.kernel.org
Signed-off-by: Sergey Shtylyov <s.shtylyov@auroraos.dev>
Signed-off-by: Hans Verkuil <hverkuil+cisco@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2026-05-17 17:14:29 +02:00
..
cxd2880
…
drx39xyj
…
a8293.c
media: Drop explicit initialization of struct i2c_device_id::driver_data to 0
2024-08-09 07:56:37 +02:00
a8293.h
…
af9013_priv.h
…
af9013.c
media: Drop explicit initialization of struct i2c_device_id::driver_data to 0
2024-08-09 07:56:37 +02:00
af9013.h
…
af9033_priv.h
…
af9033.c
media: Drop explicit initialization of struct i2c_device_id::driver_data to 0
2024-08-09 07:56:37 +02:00
af9033.h
…
as102_fe_types.h
…
as102_fe.c
…
as102_fe.h
…
ascot2e.c
…
ascot2e.h
…
atbm8830_priv.h
…
atbm8830.c
…
atbm8830.h
…
au8522_common.c
…
au8522_decoder.c
media: Drop explicit initialization of struct i2c_device_id::driver_data to 0
2024-08-09 07:56:37 +02:00
au8522_dig.c
…
au8522_priv.h
…
au8522.h
…
bcm3510_priv.h
…
bcm3510.c
…
bcm3510.h
…
bsbe1-d01a.h
…
bsbe1.h
…
bsru6.h
…
cx22700.c
…
cx22700.h
…
cx22702.c
…
cx22702.h
…
cx24110.c
…
cx24110.h
…
cx24113.c
…
cx24113.h
…
cx24116.c
media: cx24116: prevent overflows on SNR calculus
2024-10-18 10:43:03 +02:00
cx24116.h
…
cx24117.c
…
cx24117.h
…
cx24120.c
…
cx24120.h
…
cx24123.c
…
cx24123.h
…
cxd2099.c
media: Drop explicit initialization of struct i2c_device_id::driver_data to 0
2024-08-09 07:56:37 +02:00
cxd2099.h
…
cxd2820r_c.c
…
cxd2820r_core.c
media: Drop explicit initialization of struct i2c_device_id::driver_data to 0
2024-08-09 07:56:37 +02:00
cxd2820r_priv.h
…
cxd2820r_t2.c
…
cxd2820r_t.c
…
cxd2820r.h
…
cxd2841er_priv.h
…
cxd2841er.c
media: cxd2841er: fix 64-bit division on gcc-9
2025-02-21 14:01:23 +01:00
cxd2841er.h
…
dib0070.c
…
dib0070.h
…
dib0090.c
…
dib0090.h
…
dib3000.h
…
dib3000mb_priv.h
…
dib3000mb.c
media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
2025-01-02 10:34:09 +01:00
dib3000mc.c
…
dib3000mc.h
…
dib7000m.c
…
dib7000m.h
…
dib7000p.c
media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
2025-08-20 18:30:45 +02:00
dib7000p.h
…
dib8000.c
media: dib8000: avoid division by 0 in dib8000_set_dds()
2026-05-17 17:14:29 +02:00
dib8000.h
…
dib9000.c
…
dib9000.h
…
dibx000_common.c
…
dibx000_common.h
…
drxd_firm.c
…
drxd_firm.h
…
drxd_hard.c
…
drxd_map_firm.h
…
drxd.h
…
drxk_hard.c
…
drxk_hard.h
…
drxk_map.h
…
drxk.h
…
ds3000.c
…
ds3000.h
…
dvb_dummy_fe.c
…
dvb_dummy_fe.h
…
dvb-pll.c
…
dvb-pll.h
…
ec100.c
…
ec100.h
…
eds1547.h
…
gp8psk-fe.c
…
gp8psk-fe.h
…
helene.c
…
helene.h
…
horus3a.c
…
horus3a.h
…
isl6405.c
…
isl6405.h
…
isl6421.c
…
isl6421.h
…
isl6423.c
…
isl6423.h
…
itd1000_priv.h
…
itd1000.c
…
itd1000.h
…
ix2505v.c
…
ix2505v.h
…
Kconfig
…
l64781.c
…
l64781.h
…
lg2160.c
…
lg2160.h
…
lgdt330x_priv.h
…
lgdt330x.c
media: Drop explicit initialization of struct i2c_device_id::driver_data to 0
2024-08-09 07:56:37 +02:00
lgdt330x.h
…
lgdt3305.c
…
lgdt3305.h
…
lgdt3306a.c
media: Drop explicit initialization of struct i2c_device_id::driver_data to 0
2024-08-09 07:56:37 +02:00
lgdt3306a.h
…
lgs8gl5.c
…
lgs8gl5.h
…
lgs8gxx_priv.h
…
lgs8gxx.c
…
lgs8gxx.h
…
lnbh24.h
…
lnbh25.c
…
lnbh25.h
…
lnbh29.c
…
lnbh29.h
…
lnbp21.c
…
lnbp21.h
…
lnbp22.c
…
lnbp22.h
…
m88ds3103_priv.h
…
m88ds3103.c
…
m88ds3103.h
…
m88rs2000.c
…
m88rs2000.h
…
Makefile
…
mb86a16_priv.h
…
mb86a16.c
media: dvb-frontends: add missing MODULE_DESCRIPTION() macros
2024-06-29 12:20:04 +02:00
mb86a16.h
…
mb86a20s.c
…
mb86a20s.h
…
mn88443x.c
…
mn88443x.h
…
mn88472_priv.h
…
mn88472.c
media: Drop explicit initialization of struct i2c_device_id::driver_data to 0
2024-08-09 07:56:37 +02:00
mn88472.h
…
mn88473_priv.h
…
mn88473.c
media: Drop explicit initialization of struct i2c_device_id::driver_data to 0
2024-08-09 07:56:37 +02:00
mn88473.h
…
mt312_priv.h
…
mt312.c
…
mt312.h
…
mt352_priv.h
…
mt352.c
…
mt352.h
…
mxl5xx_defs.h
media: dvb-frontend/mxl5xx: Refactor struct MBIN_FILE_T and MBIN_SEGMENT_T
2024-06-15 10:49:21 +02:00
mxl5xx_regs.h
…
mxl5xx.c
move asm/unaligned.h to linux/unaligned.h
2024-10-02 17:23:23 -04:00
mxl5xx.h
…
mxl692_defs.h
…
mxl692.c
media: Drop explicit initialization of struct i2c_device_id::driver_data to 0
2024-08-09 07:56:37 +02:00
mxl692.h
…
nxt200x.c
…
nxt200x.h
…
nxt6000_priv.h
…
nxt6000.c
…
nxt6000.h
…
or51132.c
…
or51132.h
…
or51211.c
…
or51211.h
…
rtl2830_priv.h
…
rtl2830.c
drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
2024-08-09 07:56:38 +02:00
rtl2830.h
…
rtl2832_priv.h
…
rtl2832_sdr.c
…
rtl2832_sdr.h
…
rtl2832.c
drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
2024-08-09 07:56:38 +02:00
rtl2832.h
…
s5h1409.c
…
s5h1409.h
…
s5h1411.c
…
s5h1411.h
…
s5h1420_priv.h
…
s5h1420.c
…
s5h1420.h
…
s5h1432.c
…
s5h1432.h
…
s921.c
…
s921.h
…
si21xx.c
…
si21xx.h
…
si2165_priv.h
…
si2165.c
media: Drop explicit initialization of struct i2c_device_id::driver_data to 0
2024-08-09 07:56:37 +02:00
si2165.h
…
si2168_priv.h
…
si2168.c
media: Drop explicit initialization of struct i2c_device_id::driver_data to 0
2024-08-09 07:56:37 +02:00
si2168.h
…
sp2_priv.h
…
sp2.c
media: Drop explicit initialization of struct i2c_device_id::driver_data to 0
2024-08-09 07:56:37 +02:00
sp2.h
…
sp887x.c
…
sp887x.h
…
stb0899_algo.c
media: stb0899_algo: initialize cfr before using it
2024-10-18 10:43:03 +02:00
stb0899_cfg.h
…
stb0899_drv.c
…
stb0899_drv.h
…
stb0899_priv.h
…
stb0899_reg.h
…
stb6000.c
…
stb6000.h
…
stb6100_cfg.h
…
stb6100_proc.h
…
stb6100.c
…
stb6100.h
…
stv090x_priv.h
…
stv090x_reg.h
…
stv090x.c
media: Drop explicit initialization of struct i2c_device_id::driver_data to 0
2024-08-09 07:56:37 +02:00
stv090x.h
…
stv0288.c
…
stv0288.h
…
stv0297.c
…
stv0297.h
…
stv0299.c
…
stv0299.h
…
stv0367_defs.h
…
stv0367_priv.h
minmax: make generic MIN() and MAX() macros available everywhere
2024-07-28 15:49:18 -07:00
stv0367_regs.h
…
stv0367.c
…
stv0367.h
…
stv0900_core.c
…
stv0900_init.h
…
stv0900_priv.h
…
stv0900_reg.h
…
stv0900_sw.c
…
stv0900.h
…
stv0910_regs.h
…
stv0910.c
media: dvb-frontends: stv0910: remove unused struct 'sinit_table'
2024-05-31 13:51:16 +02:00
stv0910.h
…
stv6110.c
…
stv6110.h
…
stv6110x_priv.h
…
stv6110x_reg.h
…
stv6110x.c
media: Drop explicit initialization of struct i2c_device_id::driver_data to 0
2024-08-09 07:56:37 +02:00
stv6110x.h
…
stv6111.c
…
stv6111.h
…
tc90522.c
…
tc90522.h
…
tda665x.c
…
tda665x.h
…
tda826x.c
…
tda826x.h
…
tda1002x.h
…
tda1004x.c
…
tda1004x.h
…
tda8083.c
…
tda8083.h
…
tda8261_cfg.h
…
tda8261.c
…
tda8261.h
…
tda10021.c
…
tda10023.c
…
tda10048.c
…
tda10048.h
…
tda10071_priv.h
…
tda10071.c
media: Drop explicit initialization of struct i2c_device_id::driver_data to 0
2024-08-09 07:56:37 +02:00
tda10071.h
…
tda10086.c
…
tda10086.h
…
tda18271c2dd_maps.h
…
tda18271c2dd.c
…
tda18271c2dd.h
…
tdhd1.h
…
ts2020.c
media: ts2020: fix null-ptr-deref in ts2020_probe()
2024-12-09 10:40:59 +01:00
ts2020.h
…
tua6100.c
…
tua6100.h
…
ves1x93.c
…
ves1x93.h
…
ves1820.c
…
ves1820.h
…
z0194a.h
…
zd1301_demod.c
…
zd1301_demod.h
…
zl10036.c
…
zl10036.h
…
zl10039.c
…
zl10039.h
…
zl10353_priv.h
…
zl10353.c
…
zl10353.h
…