mirror of
https://github.com/adulau/aha.git
synced 2024-12-30 20:56:23 +00:00
V4L/DVB (4488): Fix possible crash in Hauppauge eeprom reading
If an eeprom defined two tuners and they supported more than eight standards combined (as opposed to each), it would overflow an array. Signed-off-by: Trent Piepho <xyzzy@speakeasy.org> Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>
This commit is contained in:
parent
40346b290f
commit
18795eb98d
1 changed files with 2 additions and 0 deletions
|
@ -605,6 +605,8 @@ void tveeprom_hauppauge_analog(struct i2c_client *c, struct tveeprom *tvee,
|
|||
tvee->tuner_formats |= hauppauge_tuner_fmt[i].id;
|
||||
t_fmt_name1[j++] = hauppauge_tuner_fmt[i].name;
|
||||
}
|
||||
}
|
||||
for (i = j = 0; i < 8; i++) {
|
||||
if (t_format2 & (1 << i)) {
|
||||
tvee->tuner2_formats |= hauppauge_tuner_fmt[i].id;
|
||||
t_fmt_name2[j++] = hauppauge_tuner_fmt[i].name;
|
||||
|
|
Loading…
Reference in a new issue