mirrors/linux-stable
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2024-10-03 23:58:05 +00:00
Code Issues Releases Wiki Activity

V4L/DVB (13325): gspca - pac7302/pac7311: Fix buffer overrun.

Browse source 
The reg_w_seq() function expects the sequence length in entries
and not in bytes. One entry in init_7302 and init_7311 is two
bytes and not one.

Signed-off-by: Marton Nemeth <nm127@freemail.hu>
Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
This commit is contained in:
Marton Nemeth 2009-11-05 05:40:46 -03:00 committed by Mauro Carvalho Chehab
parent 4f7309e278
commit 8337fc3053
2 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
drivers/media/video/gspca/pac7302.c
View file

@ -571,7 +571,7 @@ static void sethvflip(struct gspca_dev *gspca_dev)
/* this function is called at probe and resume time for pac7302 */
static int sd_init(struct gspca_dev *gspca_dev)
{
reg_w_seq(gspca_dev, init_7302, sizeof init_7302);
reg_w_seq(gspca_dev, init_7302, sizeof(init_7302)/2);
return 0;
}

2
drivers/media/video/gspca/pac7311.c
View file

@ -469,7 +469,7 @@ static void sethvflip(struct gspca_dev *gspca_dev)
/* this function is called at probe and resume time for pac7311 */
static int sd_init(struct gspca_dev *gspca_dev)
{
reg_w_seq(gspca_dev, init_7311, sizeof init_7311);
reg_w_seq(gspca_dev, init_7311, sizeof(init_7311)/2);
return 0;
}