git://ftp.safe.ca / safe / jmp / linux-2.6 / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 440b004) | patch
sound: oss: off by one bug
authorDan Carpenter <error27@gmail.com>
Sun, 3 Jan 2010 11:39:27 +0000 (12:39 +0100)
committerJaroslav Kysela <perex@perex.cz>
Fri, 8 Jan 2010 08:17:51 +0000 (09:17 +0100)
commit444c1953d496d272208902ff7010dc70d1f887f0
tree40aa1e10f108818b3b7d12384229c0501aeb5a12tree | snapshot
parent440b004cf953bec2bc8cd91c64ae707fd7e25327commit | diff
sound: oss: off by one bug

The problem is that in the original code sound_nblocks could go up to 1024
which would be an array overflow.

This was found with a static checker and has been compile tested only.

Signed-off-by: Dan Carpenter <error27@gmail.com>
Signed-off-by: Jaroslav Kysela <perex@perex.cz>
sound/oss/dev_table.c diff | blob | history
sound/oss/sound_config.h diff | blob | history
sound/oss/soundcard.c diff | blob | history
Full containers within linux kernel