diff options
| author | Christopher Brannon <chris@the-brannons.com> | 2011-02-21 14:07:10 +0000 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@suse.de> | 2011-02-23 14:39:09 -0800 |
| commit | 87be424a9a4be41df26b25b3360969211cedd5d1 (patch) | |
| tree | cf0cfa4d90a083e79904f5a5e0b2c9270a25deae /drivers/bluetooth/Kconfig | |
| parent | 1af4791552e462b37d0174407dc3173917e35ea0 (diff) | |
| download | op-kernel-dev-87be424a9a4be41df26b25b3360969211cedd5d1.zip op-kernel-dev-87be424a9a4be41df26b25b3360969211cedd5d1.tar.gz | |
Staging: speakup: fix an out-of-bounds error.
The cur_item variable from keyhelp.c is an index into a table of
messages. The following condition should always hold:
MSG_FUNCNAMES_START + cur_item <= MSG_FUNCNAMES_END.
The check in keyhelp.c was wrong. It allowed cur_item to be
incremented to an out-of-bounds value.
Signed-off-by: Christopher Brannon <chris@the-brannons.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
Diffstat (limited to 'drivers/bluetooth/Kconfig')
0 files changed, 0 insertions, 0 deletions
