[media] firewire: firedtv-avc: potential buffer overflow

Browse source

"program_info_length" is user controlled and can go up to 4095.  The
operand[] array has 509 bytes so we need to add a limit here to prevent
buffer overflows.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Stefan Richter <stefanr@s5r6.in-berlin.de>
Signed-off-by: Mauro Carvalho Chehab <mchehab@osg.samsung.com>

...

This commit is contained in:

Dan Carpenter 2014-09-08 08:18:43 -03:00 • committed by Mauro Carvalho Chehab

parent f2e323ec96

commit 3011e5e592

1 changed files with 9 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

9

drivers/media/firewire/firedtv-avc.c

View file