From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-pf1-f171.google.com (mail-pf1-f171.google.com [209.85.210.171]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id B504C381C4 for ; Sun, 16 Aug 2026 07:31:29 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.210.171 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786865490; cv=none; b=IN0kiXmI2K68vw5sh6FGdTRalAswyjWLh0Li/J7J+0EctNRkpQa3BELS4+7y6VVuBIMGFjtoZGTaVbBU3Lu16pt3Fb4iGtx99nn25UkuQj3A1GTppZfNs5s5XXuls8w4yEsWLDwIsUXG2PL0dw/XHaASsxg0absMPbDcbbweC9s= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786865490; c=relaxed/simple; bh=oYThrWrlMApvNemYpDm7viSxzDtXO2t2S1TKxh6bAoM=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=Po9tXmFi2F0WxkC5RM3UIPkKHkK3Xg6t1sLVL5Wzl3Tn95VzVIH05ok9FFaQhT4iMxi90rxZjqD5Xo5dm2S5mruvGhIWZHImdssWs83PKQCSzmOqJcuHF3jv35SK7uoIC842b5H9ng1N0KzQNcxzqL0opb/NQFOEauzXXcPe4As= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=Y8zIxOt5; arc=none smtp.client-ip=209.85.210.171 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="Y8zIxOt5" Received: by mail-pf1-f171.google.com with SMTP id d2e1a72fcca58-8487214ad2bso3188368b3a.1 for ; Sun, 16 Aug 2026 00:31:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1786865489; x=1787470289; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=4P3CyT2RbhzC4c3Src/O5pTXeOswME0FKR0fKXnpdGA=; b=Y8zIxOt5rZbiYu8kycbRSrJBmEEttYu71ctzGTngqoClXc5uPcTRjWlzDHZ3h3D5sF W4uHNIGKoQJrxyCW1fEyPwkZVhnemoctlZHQpacFBzHK6FfqaTWaY1gFjGPxaAMjttuV wyJCglL6mZUgEJJ9fQkO7RqVOIVKjJ8WJpvtYKOAkBCc4HZeVp0hPFsGQtK8k/Jk1s+J BuRhWUiV5ufoD3OY/ZYFoUY1ouDYUpfrpdsN8cE+LswVF9/bM0xhf0v1lbt1MpargC8h asZXTH3Lg6wBl50iPHJy40UB2iKZENIQLBRv0x6/OSqtrcnOyb49nopSldFUdKY5srrk dL+Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786865489; x=1787470289; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=4P3CyT2RbhzC4c3Src/O5pTXeOswME0FKR0fKXnpdGA=; b=M8UrzhfglOYuesEhl/RO5NpW9fLN+oBEFlQxtJoB7biAOs/B5uDaZIwgXZh0z/UzEz iiZGcGKvA0Uxv7oBJEcWDbibw9VbyWG5CrrHeTWGqfAItwbbcuys0CbFKVH7q0Mp/ZlZ aw4kQpN3gkp/lGNXSmXAV4pxEw2EM+LB1dr8i+QIo4vw1sRI4Qa6XLChGG8CmL0VeZji ee/LMUeeM/dHc11hL/XRkTBojOiIABpI1JLZSMx4RLx7iv6vhhFDtg/h+7WJMHdALdSk XUsWkZfkfIaOTPoX8p6UFUn6OWAQdYuxbQv6yMHyg27Nq+Y7iXeRzcPXfJQCIaSpwaem CFnQ== X-Forwarded-Encrypted: i=1; AHgh+RpIZE5lf+a5DGn2sgbTjtdJHOliT4NWYxasZbU3G06B8COXpLPEHPBQnfDWBgKLZG5S2kOwt1QbOMGbrso=@vger.kernel.org X-Gm-Message-State: AOJu0YylgKlvV9ZOr5O8dzJ0j0B6IxeEHTr9J3ZHZlmXBjT+xfH0Tshf Y7IN8N+uW6AhJQ/w1sc33oK3YGrz38SRzOQ93qeiUTXTItXA4+JK09dc X-Gm-Gg: AR+sD11qaqJIeljiERt99joiZg2VLu7YH2+195H0h1aJ8GgD6VEmL/O6P4KPpK7McvT hlQLn6KuQAJSBMdpmjQVthNbW41ri1istDUdTnrt502bMdKw6F9e3JVQd6jM21SwxxpV6KZL+39 EHKC1V1alHigEwkgkORT+EkGFI6VznYpj5lzfYtBbIPZKeWRpkyejAnQzTxWzYn+ZRhkHuH5+7S SAMUEAg8SOYaWNlLdHb0UJrGp6Jst6K1en1rgtkqB6w0EuMO1wpmXvOegHLWl8sUekjIqm2x/1J fjHnSLYoaRNjdrAVVhasb1RHTBRa3VEYKRnp8BndycNtp54yZB64ZqBTHYbwbVzMXBppqfDcgcR AtjzUZA0/DL0G824LpqvtolHYSHsJuP5DUzZk2qs9q89tKeITmaijIpIPFgA559hX6upK6l8+UE XmGugemIQwOe0w4se1PVnxOXvmxkOJk5nneAHsIM1n4l8Bzzw+zqhOqth4jeZH68quxqjncvS6V Dx3EO9jOEKyBwXhrQ3xUhIK X-Received: by 2002:a05:6a20:b598:b0:3bf:b1d3:393e with SMTP id adf61e73a8af0-3cc719c7b62mr20849714637.2.1786865489020; Sun, 16 Aug 2026 00:31:29 -0700 (PDT) Received: from OMEN ([103.148.21.25]) by smtp.gmail.com with ESMTPSA id 5a478bee46e88-320d5bd9fe0sm37320355eec.1.2026.08.16.00.31.24 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 16 Aug 2026 00:31:28 -0700 (PDT) From: George Emmanuel Thomas To: mchehab@kernel.org Cc: kees@kernel.org, linux-media@vger.kernel.org, linux-kernel@vger.kernel.org, George Emmanuel Thomas Subject: Re: [PATCH] media: ttusb-dec: validate command response length Date: Sun, 16 Aug 2026 13:01:12 +0530 Message-ID: <20260816073112.255993-1-georgeemmanuelthomas@gmail.com> X-Mailer: git-send-email 2.53.0 In-Reply-To: <20260816070844.252438-1-georgeemmanuelthomas@gmail.com> References: <20260816070844.252438-1-georgeemmanuelthomas@gmail.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Please disregard this patch. Pengpeng Hou's earlier v2 addresses the same issue more comprehensively, including request-side validation: [PATCH v2] media: ttusb-dec: validate command request and response lengths I have tested Pengpeng's v2 with the malformed USB response that triggered the KASAN slab-out-of-bounds and sent a Tested-by for that patch. Thanks, George