ttusb-dec: buffer overflow in ioctl
authorDan Carpenter <dan.carpenter@oracle.com>
Fri, 5 Sep 2014 12:09:28 +0000 (09:09 -0300)
committerBen Hutchings <ben@decadent.org.uk>
Thu, 1 Jan 2015 01:27:50 +0000 (01:27 +0000)
commit2f67670174ad4bd1c48e8b97cc107e3232d422ce
tree42a5239faa2965c066f301c3b84c318d868b1fd2
parent106ed96d46fcaf9f2e72555035fa585403cf4dd3
ttusb-dec: buffer overflow in ioctl

commit f2e323ec96077642d397bb1c355def536d489d16 upstream.

We need to add a limit check here so we don't overflow the buffer.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@osg.samsung.com>
[bwh: Backported to 3.2: adjust filename]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
drivers/media/dvb/ttusb-dec/ttusbdecfe.c