[GIT,PULL,for,v6.12-rc7] media fixes

Hi Linus,

Please pull from:

  git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media tags/media/v6.12-2

For:
  - dvb-core fixes at vb2 check and at device registration;
  - v4l2-core: fix an issue with error handling for VIDIOC_G_CTRL;
  - vb2 core: fix an issue at vb plane copy logic;
  - videobuf2-core: copy vb planes unconditionally;
  - vivid: fix buffer overwrite when using > 32 buffers;
  - vivid: fix a potential division by zero due to an issue at v4l2-tpg;
  - some spectre vulnerability fixes;
  - several OOM access fixes;
  - some buffer overflow fixes.

Regards,
Mauro

---

The following changes since commit 9852d85ec9d492ebef56dc5f229416c925758edc:

  Linux 6.12-rc1 (2024-09-29 15:06:19 -0700)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media tags/media/v6.12-2

for you to fetch changes up to 702a47ce6dde72f6e247b3c3c00a0fc521f9b1c6:

  media: videobuf2-core: copy vb planes unconditionally (2024-11-07 12:55:46 +0100)

----------------------------------------------------------------
media fixes for v6.12-rc7

----------------------------------------------------------------
Hans Verkuil (2):
      media: dvb-core: add missing buffer index check
      media: vivid: fix buffer overwrite when using > 32 buffers

Mauro Carvalho Chehab (14):
      media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
      media: v4l2-tpg: prevent the risk of a division by zero
      media: dvbdev: prevent the risk of out of memory access
      media: dvb_frontend: don't play tricks with underflow values
      media: mgb4: protect driver against spectre
      media: av7110: fix a spectre vulnerability
      media: s5p-jpeg: prevent buffer overflows
      media: ar0521: don't overflow when checking PLL values
      media: cx24116: prevent overflows on SNR calculus
      media: adv7604: prevent underflow condition when reporting colorspace
      media: stb0899_algo: initialize cfr before using it
      media: cec: extron-da-hd-4k-plus: don't use -1 as an error code
      media: pulse8-cec: fix data timestamp at pulse8_setup()
      media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set

Tudor Ambarus (1):
      media: videobuf2-core: copy vb planes unconditionally

 .../extron-da-hd-4k-plus/extron-da-hd-4k-plus.c    |  6 ++---
 drivers/media/cec/usb/pulse8/pulse8-cec.c          |  2 +-
 drivers/media/common/v4l2-tpg/v4l2-tpg-core.c      |  3 +++
 drivers/media/common/videobuf2/videobuf2-core.c    | 28 ++++++++++++----------
 drivers/media/dvb-core/dvb_frontend.c              |  4 ++--
 drivers/media/dvb-core/dvb_vb2.c                   |  8 ++++++-
 drivers/media/dvb-core/dvbdev.c                    | 16 +++++++++----
 drivers/media/dvb-frontends/cx24116.c              |  7 +++++-
 drivers/media/dvb-frontends/stb0899_algo.c         |  2 +-
 drivers/media/i2c/adv7604.c                        | 26 +++++++++++++-------
 drivers/media/i2c/ar0521.c                         |  4 ++--
 drivers/media/pci/mgb4/mgb4_cmt.c                  |  2 ++
 .../media/platform/samsung/s5p-jpeg/jpeg-core.c    | 17 ++++++++-----
 drivers/media/test-drivers/vivid/vivid-core.c      |  2 +-
 drivers/media/test-drivers/vivid/vivid-core.h      |  4 +++-
 drivers/media/test-drivers/vivid/vivid-ctrls.c     |  2 +-
 drivers/media/test-drivers/vivid/vivid-vid-cap.c   |  2 +-
 drivers/media/v4l2-core/v4l2-ctrls-api.c           | 17 ++++++++-----
 drivers/staging/media/av7110/av7110.h              |  4 +++-
 drivers/staging/media/av7110/av7110_ca.c           | 25 ++++++++++++-------
 20 files changed, 118 insertions(+), 63 deletions(-)