/[linux-patches]/genpatches-2.6/trunk/2.6.14/1720_dvb-dst-buffer-overflow-fix.patch
Gentoo

Contents of /genpatches-2.6/trunk/2.6.14/1720_dvb-dst-buffer-overflow-fix.patch

Parent Directory Parent Directory | Revision Log Revision Log


Revision 292 - (show annotations) (download) (as text)
Tue Jan 31 21:50:53 2006 UTC (14 years, 9 months ago) by johnm
File MIME type: text/x-diff
File size: 1202 byte(s)
Large update - thanks goes to Kerin Millar for the legwork.
1 From: Manu Abraham <manu@linuxtv.org>
2 Date: Wed, 9 Nov 2005 05:35:24 +0000 (-0800)
3 Subject: [PATCH] dvb: dst: Fix possible buffer overflow
4 X-Git-Tag: v2.6.15-rc1
5 X-Git-Url: http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=5c15c0b4fa850543b8ccfcf93686d24456cc384d
6
7 [PATCH] dvb: dst: Fix possible buffer overflow
8
9 Fixes a possible buffer overflow due to reading more than 8 bytes into an 8
10 byte long array
11
12 Thanks to Perceval Anichini <perceval.anichini@streamvision.fr> for pointing
13 out the bug.
14
15 Signed-off-by: Manu Abraham <manu@linuxtv.org>
16 Signed-off-by: Michael Krufky <mkrufky@linuxtv.org>
17 Cc: Johannes Stezenbach <js@linuxtv.org>
18 Signed-off-by: Andrew Morton <akpm@osdl.org>
19 Signed-off-by: Linus Torvalds <torvalds@osdl.org>
20 ---
21
22 --- a/drivers/media/dvb/bt8xx/dst_ca.c
23 +++ b/drivers/media/dvb/bt8xx/dst_ca.c
24 @@ -196,7 +196,7 @@ static int ca_get_slot_info(struct dst_s
25 int i;
26 static u8 slot_command[8] = {0x00, 0x05, 0x00, 0x00, 0x00, 0x00, 0x00, 0xff};
27
28 - u8 *slot_info = state->rxbuffer;
29 + u8 *slot_info = state->messages;
30
31 put_checksum(&slot_command[0], 7);
32 if ((dst_put_ci(state, slot_command, sizeof (slot_command), slot_info, GET_REPLY)) < 0) {

  ViewVC Help
Powered by ViewVC 1.1.20