diff options
author | Dan Carpenter <dan.carpenter@oracle.com> | 2013-02-26 13:04:51 +0300 |
---|---|---|
committer | John W. Linville <linville@tuxdriver.com> | 2013-03-06 16:25:47 -0500 |
commit | 2dcc26e37c55b9db2f3a0ea6e4b931e37ca286d2 (patch) | |
tree | b0f8f602260e4fdf03345fcc0fd25fa183d7d121 /lib/bch.c | |
parent | 88cceab541f066b7f5d56a6d2da9ae2be4c3bb6c (diff) | |
download | op-kernel-dev-2dcc26e37c55b9db2f3a0ea6e4b931e37ca286d2.zip op-kernel-dev-2dcc26e37c55b9db2f3a0ea6e4b931e37ca286d2.tar.gz |
ray_cs: read past the end of the array
"translate" should either be set or disabled. We also use it an
offset into the framing[] array when we're generating the proc
file. Framing looks like this:
static const char *framing[] = { "Encapsulation", "Translation" }
So when we're setting translate we need to restrict the values to
either 1 or 0 or it can an out of bounds read.
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Diffstat (limited to 'lib/bch.c')
0 files changed, 0 insertions, 0 deletions