aboutsummaryrefslogtreecommitdiff
path: root/drivers/misc
diff options
context:
space:
mode:
authorCesar Matias <cesar.maximo@gmail.com>2017-02-13 23:49:46 +0000
committerMister Oyster <oysterized@gmail.com>2017-11-20 18:13:41 +0100
commit431fc4f26f963e827fd1e3693b41e2dc853e9fbc (patch)
tree8867fe07ccdf372fa5eedb386c20f2560d1d0657 /drivers/misc
parent8cc8f168bd54dee8851eea249280e90605420d72 (diff)
MediaTek: Elevation of privilege vulnerability in MediaTek video driver
CVE-2016-3936, CVE-2016-3937 An elevation of privilege vulnerability in the MediaTek video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process Signed-off-by: Moyster <oysterized@gmail.com>
Diffstat (limited to 'drivers/misc')
-rw-r--r--drivers/misc/mediatek/videox/mt6735/debug.c23
1 files changed, 0 insertions, 23 deletions
diff --git a/drivers/misc/mediatek/videox/mt6735/debug.c b/drivers/misc/mediatek/videox/mt6735/debug.c
index 8d57dce76..83598160b 100644
--- a/drivers/misc/mediatek/videox/mt6735/debug.c
+++ b/drivers/misc/mediatek/videox/mt6735/debug.c
@@ -1214,29 +1214,6 @@ else if (0 == strncmp(opt, "ata",3))
{
dump_layer_info();
}
- else if (0 == strncmp(opt, "regw:", 5))
- {
- char *p = (char *)opt + 5;
- unsigned long addr = simple_strtoul(p, &p, 16);
- unsigned long val = simple_strtoul(p + 1, &p, 16);
-
- if (addr) {
- OUTREG32(addr, val);
- } else {
- goto Error;
- }
- }
- else if (0 == strncmp(opt, "regr:", 5))
- {
- char *p = (char *)opt + 5;
- unsigned int addr = (unsigned int) simple_strtoul(p, &p, 16);
-
- if (addr) {
- pr_info("DISP/DBG " "Read register 0x%08x: 0x%08x\n", addr, INREG32(addr));
- } else {
- goto Error;
- }
- }
else if(0 == strncmp(opt, "dither:", 7))
{
unsigned lrs, lgs, lbs, dbr, dbg, dbb;