diff options
| author | Malcolm Priestley <tvboxspy@gmail.com> | 2012-10-07 08:27:00 +0100 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2012-10-22 13:26:40 -0700 |
| commit | ab1dd9963137a1e122004d5378a581bf16ae9bc8 (patch) | |
| tree | 864ee83c83d206b4679d2988d52b7d6ece0e5b63 | |
| parent | 975a1ac9a9fe65d66ee1726c0db6dc58e53d232a (diff) | |
| download | op-kernel-dev-ab1dd9963137a1e122004d5378a581bf16ae9bc8.zip op-kernel-dev-ab1dd9963137a1e122004d5378a581bf16ae9bc8.tar.gz | |
staging: vt6656: [BUG] out of bound array reference in RFbSetPower.
Calling RFbSetPower with uCH zero value will cause out of bound array reference.
This causes 64 bit kernels to oops on boot.
Note: Driver does not function on 64 bit kernels and should be
blacklisted on them.
Signed-off-by: Malcolm Priestley <tvboxspy@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
| -rw-r--r-- | drivers/staging/vt6656/rf.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/drivers/staging/vt6656/rf.c b/drivers/staging/vt6656/rf.c index 593cdc7..74c0598 100644 --- a/drivers/staging/vt6656/rf.c +++ b/drivers/staging/vt6656/rf.c @@ -769,6 +769,9 @@ BYTE byPwr = pDevice->byCCKPwr; return TRUE; } + if (uCH == 0) + return -EINVAL; + switch (uRATE) { case RATE_1M: case RATE_2M: |
