Commit 560ccb75 authored by Hans Verkuil's avatar Hans Verkuil Committed by Mauro Carvalho Chehab
Browse files

media: vivid: free bitmap_cap when updating std/timings/etc. 



When vivid_update_format_cap() is called it should free any overlay
bitmap since the compose size will change.

Signed-off-by: default avatarHans Verkuil <hverkuil-cisco@xs4all.nl>
Reported-by: default avatar <syzbot+0cc8e3cc63ca373722c6@syzkaller.appspotmail.com>
Cc: <stable@vger.kernel.org>      # for v3.18 and up
Signed-off-by: default avatarMauro Carvalho Chehab <mchehab+samsung@kernel.org>
parent e5f71a27

drivers/media/platform/vivid/vivid-vid-cap.c

+2 −0
Original line number Diff line number Diff line
@@ -451,6 +451,8 @@ void vivid_update_format_cap(struct vivid_dev *dev, bool keep_controls) 
		tpg_s_rgb_range(&dev->tpg, v4l2_ctrl_g_ctrl(dev->rgb_range_cap));

		break;

	}

	vfree(dev->bitmap_cap);

	dev->bitmap_cap = NULL;

	vivid_update_quality(dev);

	tpg_reset_source(&dev->tpg, dev->src_rect.width, dev->src_rect.height, dev->field_cap);

	dev->crop_cap = dev->src_rect;