diff options
| author | Dan Carpenter <dan.carpenter@oracle.com> | 2013-02-26 20:15:02 +0100 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2013-02-27 19:10:35 +0100 |
| commit | 90c7881ecee1f08e0a49172cf61371cf2509ee4a (patch) | |
| tree | c2caac0d94e2d4d75090947c2e45be0e359adb65 /net/irda | |
| parent | proc connector: reject unprivileged listener bumps (diff) | |
| download | linux-90c7881ecee1f08e0a49172cf61371cf2509ee4a.tar.xz linux-90c7881ecee1f08e0a49172cf61371cf2509ee4a.zip | |
irda: small read beyond end of array in debug code
charset comes from skb->data. It's a number in the 0-255 range.
If we have debugging turned on then this could cause a read beyond
the end of the array.
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/irda')
| -rw-r--r-- | net/irda/iriap.c | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/net/irda/iriap.c b/net/irda/iriap.c index e71e85ba2bf1..29340a9a6fb9 100644 --- a/net/irda/iriap.c +++ b/net/irda/iriap.c @@ -495,8 +495,11 @@ static void iriap_getvaluebyclass_confirm(struct iriap_cb *self, /* case CS_ISO_8859_9: */ /* case CS_UNICODE: */ default: - IRDA_DEBUG(0, "%s(), charset %s, not supported\n", - __func__, ias_charset_types[charset]); + IRDA_DEBUG(0, "%s(), charset [%d] %s, not supported\n", + __func__, charset, + charset < ARRAY_SIZE(ias_charset_types) ? + ias_charset_types[charset] : + "(unknown)"); /* Aborting, close connection! */ iriap_disconnect_request(self); |