linux/drivers/media
Mauro Carvalho Chehab f13613acfb V4L/DVB (7235): tuner-simple: fix a buffer overflow
simple_set_tv() creates a buffer with 4 elements, and calls
simple_std_setup(), passing &buffer[1]. This makes the 5th element of buffer to
be initialized to 0, overriding some area outside the buffer.

Also, simple_std_setup() receives a buffer as parameter, but the buffer is
just overriden after the call, so, it doesn't make much sense to pass it as a
parameter.

This patch removes buffer[] from the function call, creating, instead, a local
var to be used internally.

Thanks to Axel Rometsch <axel.rometsch@freenet.de> for pointing the issue.

Reviewed-by: Michael Krufky <mkrufky@linuxtv.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>
2008-04-24 14:07:44 -03:00
..
common V4L/DVB (7094): static memory 2008-04-24 13:42:20 -03:00
dvb V4L/DVB (7224): Initial DVB-S support for MD8800 /CTX948 2008-04-24 14:07:43 -03:00
radio V4L/DVB (7094): static memory 2008-04-24 13:42:20 -03:00
video V4L/DVB (7235): tuner-simple: fix a buffer overflow 2008-04-24 14:07:44 -03:00
Kconfig V4L/DVB (7196): Lift videobuf-dma-sg's PCI dependency, until it is fixed 2008-04-24 14:07:43 -03:00
Makefile V4L/DVB (7499): v4l/dvb Kconfig: Fix bugzilla #10067 2008-04-06 17:13:20 -03:00