{"id":2222519,"url":"http://patchwork.ozlabs.org/api/1.2/patches/2222519/?format=json","web_url":"http://patchwork.ozlabs.org/project/linux-tegra/patch/20260412154843.29056-1-dennylin0707@gmail.com/","project":{"id":21,"url":"http://patchwork.ozlabs.org/api/1.2/projects/21/?format=json","name":"Linux Tegra Development","link_name":"linux-tegra","list_id":"linux-tegra.vger.kernel.org","list_email":"linux-tegra@vger.kernel.org","web_url":null,"scm_url":null,"webscm_url":null,"list_archive_url":"","list_archive_url_format":"","commit_url_format":""},"msgid":"<20260412154843.29056-1-dennylin0707@gmail.com>","list_archive_url":null,"date":"2026-04-12T15:48:43","name":"media: tegra-video: vi: validate format index before bitmap_set","commit_ref":null,"pull_url":null,"state":"new","archived":false,"hash":"5a7f7952f4af406d177965f56c1f0fd09854fd16","submitter":{"id":93122,"url":"http://patchwork.ozlabs.org/api/1.2/people/93122/?format=json","name":"Denny Lin","email":"dennylin0707@gmail.com"},"delegate":null,"mbox":"http://patchwork.ozlabs.org/project/linux-tegra/patch/20260412154843.29056-1-dennylin0707@gmail.com/mbox/","series":[{"id":499615,"url":"http://patchwork.ozlabs.org/api/1.2/series/499615/?format=json","web_url":"http://patchwork.ozlabs.org/project/linux-tegra/list/?series=499615","date":"2026-04-12T15:48:43","name":"media: tegra-video: vi: validate format index before bitmap_set","version":1,"mbox":"http://patchwork.ozlabs.org/series/499615/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/patches/2222519/comments/","check":"pending","checks":"http://patchwork.ozlabs.org/api/patches/2222519/checks/","tags":{},"related":[],"headers":{"Return-Path":"\n ","X-Original-To":["incoming@patchwork.ozlabs.org","linux-tegra@vger.kernel.org"],"Delivered-To":"patchwork-incoming@legolas.ozlabs.org","Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256\n header.s=20251104 header.b=jiOmlDqt;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=vger.kernel.org\n (client-ip=2600:3c0a:e001:db::12fc:5321; helo=sea.lore.kernel.org;\n envelope-from=linux-tegra+bounces-13718-incoming=patchwork.ozlabs.org@vger.kernel.org;\n receiver=patchwork.ozlabs.org)","smtp.subspace.kernel.org;\n\tdkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com\n header.b=\"jiOmlDqt\"","smtp.subspace.kernel.org;\n arc=none smtp.client-ip=74.125.82.196","smtp.subspace.kernel.org;\n dmarc=pass (p=none dis=none) header.from=gmail.com","smtp.subspace.kernel.org;\n spf=pass smtp.mailfrom=gmail.com"],"Received":["from sea.lore.kernel.org (sea.lore.kernel.org\n [IPv6:2600:3c0a:e001:db::12fc:5321])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4ftw6k0tvFz1xtJ\n\tfor ; Mon, 13 Apr 2026 01:53:01 +1000 (AEST)","from smtp.subspace.kernel.org (conduit.subspace.kernel.org\n [100.90.174.1])\n\tby sea.lore.kernel.org (Postfix) with ESMTP id CC396300BD82\n\tfor ; Sun, 12 Apr 2026 15:50:41 +0000 (UTC)","from localhost.localdomain (localhost.localdomain [127.0.0.1])\n\tby smtp.subspace.kernel.org (Postfix) with ESMTP id ABE7929ACCD;\n\tSun, 12 Apr 2026 15:50:41 +0000 (UTC)","from mail-dy1-f196.google.com (mail-dy1-f196.google.com\n [74.125.82.196])\n\t(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))\n\t(No client certificate requested)\n\tby smtp.subspace.kernel.org (Postfix) with ESMTPS id 4E95118C008\n\tfor ; Sun, 12 Apr 2026 15:50:40 +0000 (UTC)","by mail-dy1-f196.google.com with SMTP id\n 5a478bee46e88-2d868d014a5so362088eec.1\n for ;\n Sun, 12 Apr 2026 08:50:40 -0700 (PDT)","from localhost.localdomain ([76.32.119.210])\n by smtp.gmail.com with ESMTPSA id\n 5a478bee46e88-2d561cd2c09sm15403781eec.18.2026.04.12.08.50.37\n (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);\n Sun, 12 Apr 2026 08:50:38 -0700 (PDT)"],"ARC-Seal":"i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116;\n\tt=1776009041; cv=none;\n b=Sozzq06QEH7qzny5uRRN0cJu2YQVsigtAw1xxgPi4gwaNpz2aTmD91tN09vFtqAnAKZTTwCNIkyq7nLseJua3u3AelwrFsRMAXdKoaaW0viqTSbKYkNO/GQKBlhfZ8QUBd4Xp/NErlx2Y5Ek3HwJE9xiAT5OzH2xFXJ6hEaA+Ys=","ARC-Message-Signature":"i=1; a=rsa-sha256; d=subspace.kernel.org;\n\ts=arc-20240116; t=1776009041; c=relaxed/simple;\n\tbh=lwhat2bSQv6XJb0gxi3qwiTzBQ65AmGJ8xWTcMNNrUs=;\n\th=From:To:Cc:Subject:Date:Message-Id:MIME-Version;\n b=XFjCmWfraW5rYle1y+e5JIwIuG1D6ItTw+v6yxFzP1xnuMAKIUTdxkyMQvwZ/1bxGAmTXd11vkDr+BcA7HNPAh/BYpzO8krvVETUKA0SIaNhzIvxQR34SBDqYIvFtHBtkC1U/fPFwRC16fZVmTfrOGJ6nWGWi99CUE48g9ugPSQ=","ARC-Authentication-Results":"i=1; smtp.subspace.kernel.org;\n dmarc=pass (p=none dis=none) header.from=gmail.com;\n spf=pass smtp.mailfrom=gmail.com;\n dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com\n header.b=jiOmlDqt; arc=none smtp.client-ip=74.125.82.196","DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=gmail.com; s=20251104; t=1776009039; x=1776613839;\n darn=vger.kernel.org;\n h=content-transfer-encoding:mime-version:message-id:date:subject:cc\n :to:from:from:to:cc:subject:date:message-id:reply-to;\n bh=SHDvV1CNmZJ3zUchoWzB/rMv8sKx+dY5re1OzoQ2tMA=;\n b=jiOmlDqtHfNEMgtxMZl57yN7oVgbbPCq7CaWJ8SIxqzI86Pzt1dNBqSfb7np0MdsMk\n qkzqvx+mFIEPLE3J3RJ8xC2PCZZxRvV1n9I1R7yRljqsywiTPzFh+NUiHu2xTpl0d/fN\n 4D0jVNYMJyfsgMMfZlPKFgAkH0UPUwfKT40EtiUMqA/oYClUaHH1+Ryk64vPN59EuUL4\n m7uIxbH2AzDK8yvIBVwBqaG6c51ZEjTXKE73kAsrRvWY3ghpLYqjvbmVesPXXn4Y20IV\n GPqrk87GFLtCKof/DPUpGGwdn8aDlRIWxRtCiX9oiIli6wEiYwBB5wD7uZjt07WydMD8\n TKyw==","X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20251104; t=1776009039; x=1776613839;\n h=content-transfer-encoding:mime-version:message-id:date:subject:cc\n :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date\n :message-id:reply-to;\n bh=SHDvV1CNmZJ3zUchoWzB/rMv8sKx+dY5re1OzoQ2tMA=;\n b=s7nopU9gJVqbDlrTBgAzY3YQbemEw1YT2VqdTPivKGrkxEaFQ1ylqIn+vqg0Y7lWOK\n ws0VgPCmD36PloouYRkSWP2wUVkvVYuKjduvsCVfnUZC3Pb0pZZ4GQGjjMiZOUyb7BXh\n xA6sCvxzvmvyZrDuo77vYRkRlqMg+uUvLUIqBYjwChwS1jwMoZ8s0on9dXUaG0NL1ytP\n qVLyw3OF53RG7ksvbiqOTxfade+n//BIfDmgsn6/8Cs9R0l/p6SkJ5sCuEmSW3TqrDlO\n E8N2YlcsrACPCGwMwbi36bDXez9p9KaDWPZoraA47AFIAhL2qyFxZppH8f5uxS+lUe09\n YgAw==","X-Forwarded-Encrypted":"i=1;\n AFNElJ/hO7ZOSQQ3PmGHNY9ti5teWlTjKfWjAun0lUmci3+qWoga47m8phooI0hIglJ6EN9h5eUlmwsW1i/C/Q==@vger.kernel.org","X-Gm-Message-State":"AOJu0YxG+Vxkrcw5Xld47ztPbLyDNBxYac0UQdUoRcaZj8j3PFJDcCwH\n\tqisC0a+z+Wwyi3P1RLvo6/L8ycYf0yUNaGqv9OSx4lXA4P/QXKGvrWrJp7fN6I5VkAM=","X-Gm-Gg":"AeBDiet9wRbmKIxN1+mAZOdL6puYU0/QjpSRgvPG6+JqL1s0r53uyzrjj7BE4Cnj03o\n\tibI7vIG4Vrm347+COi7B5DkvtSiDWdMNPjqNBRhr7zBkxzwHeDYebiNO8hpqnIf8m1FYIUW5YFd\n\tXX1GkCkrEHLsKCuB6W0q/3rvIlKmpjLrQHQFVoS6LW1uhCaKp5TUJNI+d6rQXhGsoVJxBdsUngE\n\thCGH3qnFeLIKJPZmdhbK2WibwGs38bymEP3kqq5X3WfP6Q7CErPVNXXqMklSo6/egeLiSIAhNAZ\n\tiReJtdlDPSvvlstqwXzk6gtJoE81EVR6XFjqvC1OXQCgAt7t1GXqBkkYjmqe/Mihf8wF6UH7H+2\n\twlAEqkyEidTqUw0xm7818EzQ6S3dfWCUeCiIEPOD/UWdoz/UCw2sX3TrKKrF476f+SQHdQ5+jys\n\tnkY+TSgr/qZiGQ8auSFR0DFySdwrj/Bhebmjbzk5SryuQA059oN3aNKqY=","X-Received":"by 2002:a05:7301:4b12:b0:2d6:526c:55cf with SMTP id\n 5a478bee46e88-2d6526c5a9emr3259901eec.9.1776009038931;\n Sun, 12 Apr 2026 08:50:38 -0700 (PDT)","From":"Hungyu Lin ","To":"thierry.reding@gmail.com,\n\tjonathanh@nvidia.com,\n\tskomatineni@nvidia.com,\n\tluca.ceresoli@bootlin.com","Cc":"mchehab@kernel.org,\n\tgregkh@linuxfoundation.org,\n\tlinux-media@vger.kernel.org,\n\tlinux-tegra@vger.kernel.org,\n\tlinux-staging@lists.linux.dev,\n\tlinux-kernel@vger.kernel.org,\n\tHungyu Lin ","Subject":"[PATCH] media: tegra-video: vi: validate format index before\n bitmap_set","Date":"Sun, 12 Apr 2026 15:48:43 +0000","Message-Id":"<20260412154843.29056-1-dennylin0707@gmail.com>","X-Mailer":"git-send-email 2.34.1","Precedence":"bulk","X-Mailing-List":"linux-tegra@vger.kernel.org","List-Id":"","List-Subscribe":"","List-Unsubscribe":"","MIME-Version":"1.0","Content-Transfer-Encoding":"8bit"},"content":"tegra_get_format_idx_by_code() returns -1 when no matching format\nis found. vi_tpg_fmts_bitmap_init() used the returned index directly\nin bitmap_set(), which may lead to an out-of-bounds access when the\nformat is not present.\n\nThis can occur when TPG is enabled on SoCs whose video_formats[]\ntable does not include the requested media bus formats.\n\nValidate the index before calling bitmap_set().\n\nSigned-off-by: Hungyu Lin \n---\n drivers/staging/media/tegra-video/vi.c | 6 ++++--\n 1 file changed, 4 insertions(+), 2 deletions(-)","diff":"diff --git a/drivers/staging/media/tegra-video/vi.c b/drivers/staging/media/tegra-video/vi.c\nindex 9c0b38585d63..dd8911640d98 100644\n--- a/drivers/staging/media/tegra-video/vi.c\n+++ b/drivers/staging/media/tegra-video/vi.c\n@@ -1020,12 +1020,14 @@ static void vi_tpg_fmts_bitmap_init(struct tegra_vi_channel *chan)\n \n \tindex = tegra_get_format_idx_by_code(chan->vi,\n \t\t\t\t\t MEDIA_BUS_FMT_SRGGB10_1X10, 0);\n-\tbitmap_set(chan->tpg_fmts_bitmap, index, 1);\n+\tif (index >= 0)\n+\t\tbitmap_set(chan->tpg_fmts_bitmap, index, 1);\n \n \tindex = tegra_get_format_idx_by_code(chan->vi,\n \t\t\t\t\t MEDIA_BUS_FMT_RGB888_1X32_PADHI,\n \t\t\t\t\t 0);\n-\tbitmap_set(chan->tpg_fmts_bitmap, index, 1);\n+\tif (index >= 0)\n+\t\tbitmap_set(chan->tpg_fmts_bitmap, index, 1);\n }\n \n static int vi_fmts_bitmap_init(struct tegra_vi_channel *chan)\n","prefixes":[]}