linux-stable/drivers/staging/speakup
Colin Ian King 99a9ffacc1 staging: speakup: ensure we do not overrun synths array
synth_add allows one to add MAXSYNTHS synths to the synths array;
however it always NULLifies the next synth in the array which
means that on the MAXSYNTHS synth we get an out-of-bounds write of
the NULL to the synths array.  Make the synths array MAXSYNTHS + 1
elements in size to allow for the final NULL sentinal to avoid the
out-of-bounds write.

Issue found wit CoverityScan, CID#744671

Signed-off-by: Colin Ian King <colin.king@canonical.com>
Reviewed-by: Samuel Thibault <samuel.thibault@ens-lyon.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2016-08-15 19:14:54 +02:00
..
buffers.c
DefaultKeyAssignments
devsynth.c Staging: speakup: Remove space after cast 2016-08-15 19:14:53 +02:00
fakekey.c
i18n.c staging: speakup: compress return logic into one line 2016-02-11 20:00:30 -08:00
i18n.h
Kconfig Staging: speakup: Fix allyesconfig build on mn10300 2016-02-01 13:05:44 -08:00
keyhelp.c
kobjects.c Staging: speakup: Add space around '|' 2016-03-05 14:48:04 -08:00
main.c Staging: speakup: Clear hi font bit from attributes 2016-03-28 07:30:36 -07:00
Makefile
selection.c tty: Replace TTY_THROTTLED bit tests with tty_throttled() 2016-04-30 09:26:55 -07:00
serialio.c staging: speakup: Fix block comment style 2016-02-14 16:49:09 -08:00
serialio.h staging: speakup: fix type mismatch warnings 2016-03-28 07:30:36 -07:00
speakup.h
speakup_acnt.h
speakup_acntpc.c
speakup_acntsa.c
speakup_apollo.c
speakup_audptr.c
speakup_bns.c
speakup_decext.c Staging:speakup:add space around '|' 2016-02-07 19:07:38 -08:00
speakup_decpc.c
speakup_dectlk.c
speakup_dtlk.c
speakup_dtlk.h
speakup_dummy.c
speakup_keypc.c
speakup_ltlk.c
speakup_soft.c
speakup_spkout.c
speakup_txprt.c
speakupmap.h
speakupmap.map
spk_priv.h
spk_priv_keyinfo.h
spk_types.h
spkguide.txt
synth.c staging: speakup: ensure we do not overrun synths array 2016-08-15 19:14:54 +02:00
thread.c
TODO
varhandlers.c