From: Dan Carpenter Date: Thu, 15 Mar 2012 11:37:32 +0000 (+0300) Subject: max17042_battery: Fix a couple buffer overflows X-Git-Tag: v3.5-rc1~23^2~26 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=1ef3d8fb4deb77ee020b246d217dd4dfb28d88d5;p=pandora-kernel.git max17042_battery: Fix a couple buffer overflows There are a couple issues here caused by confusion between sizeof() and ARRAY_SIZE(). "table_size" should be the number of elements, but we should allocate it with kcalloc() so that we allocate the correct number of bytes. In max17042_init_model() we don't allocate enough space so we go past the end of the array in max17042_read_model_data() and max17042_model_data_compare(). In max17042_verify_model_lock() we allocate the right amount of space but we call max17042_read_model_data() with the wrong number of elements and also in the for loop we go past the end of the array. Signed-off-by: Dan Carpenter Acked-by: Dirk Brandewie Signed-off-by: Anton Vorontsov --- Reading git-diff-tree failed