From: Dan Carpenter Date: Thu, 7 Feb 2013 07:24:49 +0000 (-0300) Subject: [media] dvb-usb: check for invalid length in ttusb_process_muxpack() X-Git-Tag: v3.9-rc1~93^2~22 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=bf5bbed15c41228ea1abbb8d3931050922bfc37f;p=pandora-kernel.git [media] dvb-usb: check for invalid length in ttusb_process_muxpack() This patch is driven by a static checker warning. The ttusb_process_muxpack() function is only called from ttusb_process_frame(). Before calling, it verifies that len >= 2. The problem is that len == 2 is not valid and would lead to an array underflow. Odd number values for len are also invalid and would lead to reading past the end of the array. Signed-off-by: Dan Carpenter Signed-off-by: Mauro Carvalho Chehab --- Reading git-diff-tree failed