Messages in this thread | | | Date | Wed, 23 Mar 2005 02:26:14 +0100 | From | Adrian Bunk <> | Subject | drivers/input/touchscreen/gunze.c: gunze_process_packet: invalid array access |
| |
The Coverity checker found the following bug in the function gunze_process_packet in drivers/input/touchscreen/gunze.c:
<-- snip -->
... #define GUNZE_MAX_LENGTH 10 ... struct gunze { ... unsigned char data[GUNZE_MAX_LENGTH]; ... }; ... static void gunze_process_packet(struct gunze* gunze, struct pt_regs *regs) ... gunze->data[10] = 0; ...
<-- snip -->
The bug is obvious, but for a correct solution someone should know this code better than I do.
cu Adrian
--
"Is there not promise of rain?" Ling Tan asked suddenly out of the darkness. There had been need of rain for many days. "Only a promise," Lao Er said. Pearl S. Buck - Dragon Seed
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |