![]() | |||||||||||||
Messages in this thread |
On Sat, Nov 23 2002, Andy Chou wrote: > --------------------------------------------------------- > [BUG] [GEM] base starts at offset 4 of buf > /u1/acc/linux/2.5.48/drivers/cdrom/cdrom.c:1170:dvd_read_physical: > ERROR:BUFFER:1170:1170:Array bounds error: base[16] indexed with [16] > layer->track_density = base[3] & 0xf; > layer->linear_density = base[3] >> 4; > layer->start_sector = base[5] << 16 | base[6] << 8 | base[7]; > layer->end_sector = base[9] << 16 | base[10] << 8 | base[11]; > layer->end_sector_l0 = base[13] << 16 | base[14] << 8 | base[15]; > > Error ---> > layer->bca = base[16] >> 7; > > return 0; Ah good catch. The buf[20] is simply too small, it must be 21 (or probably just 22 to make it even, the size is 21 bytes for header and data) -- Jens Axboe - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/ | ||||||||||||
| Last update: 2005-03-22 12:31 [W:5.547 / U:0.010 seconds] ©2003-2008 Jasper Spaans | |||||||||||||