[GIT PULL for v7.3-rc3] media fixes

[Mauro Carvalho Chehab <mchehab+huawei@kernel.org>]

Hi Linus,

Please pull from:

	git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media.git media/v7.3-2

For:
- v4l2-core: add bounded tile-count helpers for HEVC stateless decoders
- v4l2-core: validate AV1 tile counts fits in array size
- v4l2-core: validate HEVC tile counts fits in array size
- v4l2-core: fix memcmp() size in B1 reference list comparison
- mediatek: bound AV1 tile-start copy to fit in array size
- rockchip: reject AV1 frames exceeding the tile size
- rockchip: guard VPU981 AV1 divisor and tile buffer
- hantro: bound G2 HEVC tile loop to the buffer size
- rkvdec: bound HEVC tile loops and PPS id to fit the array size
- rppx1: read the raw pattern from the PRE2 acquisition module
- rppx1: describe the MAIN_POST white balance gains block

Regards,
Mauro

---

The following changes since commit cee9395acd8043be0644b25c34bfa86623f2b935:

  Linux 7.3-rc1 (2026-08-30 13:34:40 -0700)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media.git tags/media/v7.3-2

for you to fetch changes up to 37bef2170d4c88fc3d708eecf3ef0f4032bc1372:

  media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity (2026-09-07 09:01:05 +0200)

----------------------------------------------------------------
[GIT PULL for v7.3-rc3] media fixes

----------------------------------------------------------------
Haotian Zhang (1):
      media: v4l2-h264: Fix memcmp() size in B1 reference list comparison

Linmao Li (2):
      media: rppx1: describe the MAIN_POST white balance gains block
      media: rppx1: bls: read the raw pattern from the PRE2 acquisition module

Michael Bommarito (8):
      media: v4l2-ctrls: validate HEVC tile counts
      media: v4l2-ctrls: validate AV1 tile counts
      media: hevc: add bounded tile-count helpers
      media: rkvdec: bound HEVC tile loops and PPS id to the array capacity
      media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity
      media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer
      media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity
      media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity

 .../media/platform/dreamchip/rppx1/rpp_params.c    |  1 +
 drivers/media/platform/dreamchip/rppx1/rppx1_bls.c |  2 +-
 .../vcodec/decoder/vdec/vdec_av1_req_lat_if.c      |  5 +-
 .../platform/rockchip/rkvdec/rkvdec-hevc-common.c  | 14 ++++--
 .../media/platform/rockchip/rkvdec/rkvdec-hevc.c   |  7 ++-
 .../platform/rockchip/rkvdec/rkvdec-vdpu381-hevc.c |  2 +
 .../platform/verisilicon/hantro_g2_hevc_dec.c      |  6 ++-
 .../verisilicon/rockchip_vpu981_hw_av1_dec.c       | 57 ++++++++++++++++++----
 drivers/media/v4l2-core/v4l2-ctrls-core.c          | 32 ++++++++++++
 drivers/media/v4l2-core/v4l2-h264.c                |  3 +-
 include/media/v4l2-hevc.h                          | 41 ++++++++++++++++
 11 files changed, 149 insertions(+), 21 deletions(-)
 create mode 100644 include/media/v4l2-hevc.h