projects
/
GitHub
/
mt8127
/
android_kernel_alcatel_ttab.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
27059b3
)
V4L/DVB (12438): Read buffer overflow
author
Roel Kluin
<roel.kluin@gmail.com>
Tue, 11 Aug 2009 01:07:54 +0000
(22:07 -0300)
committer
Mauro Carvalho Chehab
<mchehab@redhat.com>
Thu, 13 Aug 2009 23:39:14 +0000
(20:39 -0300)
parport[n] is checked before n < MAX_CAMS
Signed-off-by: Roel Kluin <roel.kluin@gmail.com>
Signed-off-by: Douglas Schilling Landgraf <dougsland@redhat.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
drivers/media/video/bw-qcam.c
patch
|
blob
|
blame
|
history
diff --git
a/drivers/media/video/bw-qcam.c
b/drivers/media/video/bw-qcam.c
index 10dbd4a11b30f8e4aaf7e0ac2fad97f69bb56dbb..9e39bc5f7b00147098a2c660880e6f3853be5e6d 100644
(file)
--- a/
drivers/media/video/bw-qcam.c
+++ b/
drivers/media/video/bw-qcam.c
@@
-992,7
+992,7
@@
static int accept_bwqcam(struct parport *port)
if (parport[0] && strncmp(parport[0], "auto", 4) != 0) {
/* user gave parport parameters */
- for
(n=0; parport[n] && n<MAX_CAMS; n++)
{
+ for
(n = 0; n < MAX_CAMS && parport[n]; n++)
{
char *ep;
unsigned long r;
r = simple_strtoul(parport[n], &ep, 0);