diff options
| author | Malcolm Priestley <tvboxspy@gmail.com> | 2012-10-07 08:27:00 +0100 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2013-01-17 08:43:56 -0800 |
| commit | a32f2fed9432a39357bfcf392849f0e233639727 (patch) | |
| tree | a6eef8adbd3140fde6aad3591e51556544c5b5bf /drivers/staging | |
| parent | 1cf819361e77cff23d4385775a6f120cabe29839 (diff) | |
| download | kernel_samsung_smdk4412-a32f2fed9432a39357bfcf392849f0e233639727.zip kernel_samsung_smdk4412-a32f2fed9432a39357bfcf392849f0e233639727.tar.gz kernel_samsung_smdk4412-a32f2fed9432a39357bfcf392849f0e233639727.tar.bz2 | |
staging: vt6656: [BUG] out of bound array reference in RFbSetPower.
commit ab1dd9963137a1e122004d5378a581bf16ae9bc8 upstream.
Calling RFbSetPower with uCH zero value will cause out of bound array reference.
This causes 64 bit kernels to oops on boot.
Note: Driver does not function on 64 bit kernels and should be
blacklisted on them.
Signed-off-by: Malcolm Priestley <tvboxspy@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/staging')
| -rw-r--r-- | drivers/staging/vt6656/rf.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/drivers/staging/vt6656/rf.c b/drivers/staging/vt6656/rf.c index 3fd0478..8cf0881 100644 --- a/drivers/staging/vt6656/rf.c +++ b/drivers/staging/vt6656/rf.c @@ -769,6 +769,9 @@ BYTE byPwr = pDevice->byCCKPwr; return TRUE; } + if (uCH == 0) + return -EINVAL; + switch (uRATE) { case RATE_1M: case RATE_2M: |