media: dm1105: Limit number of cards to avoid buffer over read

Browse source

dm1105_probe() counts number of cards at dm1105_devcount,
but missed bounds check before dereference a card array.

Found by Linux Driver Verification project (linuxtesting.org).

Signed-off-by: Anton Vasilyev <vasilyev@ispras.ru>
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>

...

This commit is contained in:

Anton Vasilyev 2018-07-18 10:13:56 -04:00 • committed by Mauro Carvalho Chehab

parent 817dc4b579

commit 65b40a986f

1 changed files with 3 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

3

drivers/media/pci/dm1105/dm1105.c

View file