diff options
| author | Dan Carpenter <dan.carpenter@oracle.com> | 2013-02-07 08:24:49 +0100 |
|---|---|---|
| committer | Mauro Carvalho Chehab <mchehab@redhat.com> | 2013-02-08 20:29:52 +0100 |
| commit | bf5bbed15c41228ea1abbb8d3931050922bfc37f (patch) | |
| tree | 84e9db5c9d1e57a42ccbcb7ffaaefb8d0ee1f025 /drivers/media/usb/tm6000 | |
| parent | [media] s5p-tv: Include missing platform_device.h header (diff) | |
| download | linux-bf5bbed15c41228ea1abbb8d3931050922bfc37f.tar.xz linux-bf5bbed15c41228ea1abbb8d3931050922bfc37f.zip | |
[media] dvb-usb: check for invalid length in ttusb_process_muxpack()
This patch is driven by a static checker warning.
The ttusb_process_muxpack() function is only called from
ttusb_process_frame(). Before calling, it verifies that len >= 2. The
problem is that len == 2 is not valid and would lead to an array
underflow.
Odd number values for len are also invalid and would lead to reading
past the end of the array.
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
Diffstat (limited to 'drivers/media/usb/tm6000')
0 files changed, 0 insertions, 0 deletions