media: winbond-cir: buffer overrun during transmit

Browse source

We're reading beyond the buffer before checking its length.

BUG: KASAN: slab-out-of-bounds in wbcir_irq_tx

Signed-off-by: Sean Young <sean@mess.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>

...

This commit is contained in:

Sean Young 2017-08-04 06:33:41 -04:00 • committed by Mauro Carvalho Chehab

parent ff05cf0937

commit 4fe055ecfc

1 changed files with 1 additions and 1 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

2

drivers/media/rc/winbond-cir.c

View file