git.openpandora.org / pandora-kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e947d9a) | patch
[media] dvb: si21xx: buffer overflow in si21_writeregs()
authorDan Carpenter <dan.carpenter@oracle.com>
Tue, 9 Sep 2014 12:05:28 +0000 (09:05 -0300)
committerMauro Carvalho Chehab <mchehab@osg.samsung.com>
Tue, 23 Sep 2014 19:13:38 +0000 (16:13 -0300)
commitcf3b576d52c1f0a204f0c8bdecc22a338f7ca5a4
treec6332ee4913d4912a434d1bc39b6ac15ac08a0e0tree | snapshot
parente947d9ad8ab118d51ff07b7d93c3c1a3e9f7c42fcommit | diff
[media] dvb: si21xx: buffer overflow in si21_writeregs()

"len" is user controlled and can be up to 255.  Anything more than 59
will cause a buffer overflow so we need to add a test for that.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@osg.samsung.com>
drivers/media/dvb-frontends/si21xx.c diff | blob | history
Pandora Kernel Repository