diff options
| author | Mauro Carvalho Chehab <mchehab@redhat.com> | 2009-06-18 11:11:57 +0000 |
|---|---|---|
| committer | Mauro Carvalho Chehab <mchehab@redhat.com> | 2009-06-18 11:11:57 +0000 |
| commit | f7ea703f977df67b32fa86271669d8d4a5d3ce7f (patch) | |
| tree | c164c1bcf004d457b78857b76baffb2f444b0aa8 /linux/drivers/media/video/ivtv/ivtv-i2c.c | |
| parent | c847e3dd95dce3751a45cac3b01a73b6f8f293c9 (diff) | |
| download | mediapointer-dvb-s2-f7ea703f977df67b32fa86271669d8d4a5d3ce7f.tar.gz mediapointer-dvb-s2-f7ea703f977df67b32fa86271669d8d4a5d3ce7f.tar.bz2 | |
zl10353 and qt1010: fix stack corruption bug
From: Jan Nikitenko <jan.nikitenko@gmail.com>
Fixes stack corruption bug present in dump_regs function of zl10353 and
qt1010 drivers: the buffer buf was one byte smaller than required -
there are 4 chars for address prefix, 16 * 3 chars for dump of 16 eeprom
bytes per line and 1 byte for zero ending the string required, i.e. 53
bytes, but only 52 were provided.
The one byte missing in stack based buffer buf can cause stack
corruption possibly leading to kernel oops, as discovered originally
with af9015 driver (af9015: fix stack corruption bug).
Signed-off-by: Jan Nikitenko <jan.nikitenko@gmail.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
Diffstat (limited to 'linux/drivers/media/video/ivtv/ivtv-i2c.c')
0 files changed, 0 insertions, 0 deletions