[media] mb86a20s: fix audio sub-channel check
As reported by Dan Carpenter <dan.carpenter@oracle.com> FYI, there are new smatch warnings show up in: tree: git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next master head: da17d7bda957ae4697b6abc0793f74fb9b50b58f commit:04fa725e7b
[media] mb86a20s: Implement set_frontend cache logic New smatch warnings: drivers/media/dvb-frontends/mb86a20s.c:1897 mb86a20s_set_frontend() error: buffer overflow 'mb86a20s_subchannel' 8 <= 804fa725e
Mauro Carvalho Chehab 2013-03-04 1894 if (c->isdbt_sb_subchannel > ARRAY_SIZE(mb86a20s_subchannel))04fa725e
Mauro Carvalho Chehab 2013-03-04 1895 c->isdbt_sb_subchannel = 0;04fa725e
Mauro Carvalho Chehab 2013-03-04 189604fa725e
Mauro Carvalho Chehab 2013-03-04 @1897 state->subchannel = mb86a20s_subchannel[c->isdbt_sb_subchannel]; Reported-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com> Signed-off-by: Michael Krufky <mkrufky@linuxtv.org> Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
This commit is contained in:
Родитель
4f62a20dfb
Коммит
41c6e9dd09
|
@ -1915,7 +1915,7 @@ static int mb86a20s_set_frontend(struct dvb_frontend *fe)
|
|||
if (!c->isdbt_sb_mode) {
|
||||
state->subchannel = 0;
|
||||
} else {
|
||||
if (c->isdbt_sb_subchannel > ARRAY_SIZE(mb86a20s_subchannel))
|
||||
if (c->isdbt_sb_subchannel >= ARRAY_SIZE(mb86a20s_subchannel))
|
||||
c->isdbt_sb_subchannel = 0;
|
||||
|
||||
state->subchannel = mb86a20s_subchannel[c->isdbt_sb_subchannel];
|
||||
|
|
Загрузка…
Ссылка в новой задаче