Messages in this thread Patch in this message | | | Date | Mon, 6 Nov 2006 10:37:22 +0100 | From | Adrian Bunk <> | Subject | [2.6 patch] drivers/telephony/ixj: fix an array overrun |
| |
The Coverity checker noted that in drivers/telephony/ixj.c:ixj_build_filter_cadence(), filter_en[4] or filter_en[5] could be written to.
Signed-off-by: Adrian Bunk <bunk@stusta.de>
--- linux-2.6/drivers/telephony/ixj.h.old 2006-11-06 10:34:56.000000000 +0100 +++ linux-2.6/drivers/telephony/ixj.h 2006-11-06 10:35:10.000000000 +0100 @@ -1295,7 +1295,7 @@ Proc_Info_Type Info_write; unsigned short frame_count; unsigned int filter_hist[4]; - unsigned char filter_en[4]; + unsigned char filter_en[6]; unsigned short proc_load; unsigned long framesread; unsigned long frameswritten; - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |