Files
Mark Johnston 97e24b41d2 vchiq: Merge two commits from Linux
6e474d8e3981 ("staging: vchiq_shim: avoid code duplication") refactors
some code which makes applying the subsequent patch easier.

49bec49fd7f2 ("staging: vc04_services: remove vchiq_copy_from_user")
addresses a user-triggerable integer overflow via the
VCHIQ_IOC_QUEUE_MESSAGE ioctl on /dev/vchiq (which has mode 0600 by
default).  It also addresses insufficient validation of user-controlled
addresses in vchiq_copy_from_user().

Update the bcm2835_audio driver to follow the change to
vchi_msg_queue().

Reported by:	Vicki Pfau
Reviewed by:	Abdelkader Boudih <[email protected]>
Tested by:	Abdelkader Boudih <[email protected]>
Tested by:	Marco Devesas Campos <[email protected]>
MFC after:	2 weeks
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D58889
2026-08-21 14:57:31 +00:00
..
2026-08-21 14:57:31 +00:00