Bläddra i källkod

[PATCH] drivers/telephony/ixj: fix an array overrun

The Coverity checker noted that in
drivers/telephony/ixj.c:ixj_build_filter_cadence(), filter_en[4] or
filter_en[5] could be written to.

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
Adrian Bunk 18 år sedan
förälder
incheckning
b196872cd6
1 ändrade filer med 1 tillägg och 1 borttagningar
  1. 1 1
      drivers/telephony/ixj.h

+ 1 - 1
drivers/telephony/ixj.h

@@ -1295,7 +1295,7 @@ typedef struct {
 	Proc_Info_Type Info_write;
 	Proc_Info_Type Info_write;
 	unsigned short frame_count;
 	unsigned short frame_count;
 	unsigned int filter_hist[4];
 	unsigned int filter_hist[4];
-	unsigned char filter_en[4];
+	unsigned char filter_en[6];
 	unsigned short proc_load;
 	unsigned short proc_load;
 	unsigned long framesread;
 	unsigned long framesread;
 	unsigned long frameswritten;
 	unsigned long frameswritten;