From 1bdffce920587848c68bbb979ffea43897b6f69d Mon Sep 17 00:00:00 2001 From: Mauro Carvalho Chehab Date: Mon, 5 Nov 2007 09:41:50 -0200 Subject: Fix a buffer overflow at xc2028_get_reg From: Mauro Carvalho Chehab Signed-off-by: Mauro Carvalho Chehab --- linux/drivers/media/video/tuner-xc2028.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'linux/drivers/media/video/tuner-xc2028.c') diff --git a/linux/drivers/media/video/tuner-xc2028.c b/linux/drivers/media/video/tuner-xc2028.c index 87ed88b38..8bfce9f7e 100644 --- a/linux/drivers/media/video/tuner-xc2028.c +++ b/linux/drivers/media/video/tuner-xc2028.c @@ -106,13 +106,13 @@ struct xc2028_data { static int xc2028_get_reg(struct xc2028_data *priv, u16 reg) { int rc; - unsigned char buf[1]; + unsigned char buf[2]; tuner_info("%s called\n", __FUNCTION__); buf[0] = reg; - i2c_send(rc, priv, buf, sizeof(buf)); + i2c_send(rc, priv, buf, 1); if (rc < 0) return rc; -- cgit v1.2.3