| commit | 3011e5e592a2d31556cc3eff335a1ecccd473fa0 | [log] [tgz] |
|---|---|---|
| author | Dan Carpenter <dan.carpenter@oracle.com> | Mon Sep 08 08:18:43 2014 -0300 |
| committer | Mauro Carvalho Chehab <mchehab@osg.samsung.com> | Tue Sep 23 16:13:37 2014 -0300 |
| tree | 7285f69453ed9f0822019e42afb3ef10fe39c8c8 | |
| parent | f2e323ec96077642d397bb1c355def536d489d16 [diff] |
[media] firewire: firedtv-avc: potential buffer overflow "program_info_length" is user controlled and can go up to 4095. The operand[] array has 509 bytes so we need to add a limit here to prevent buffer overflows. Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Reviewed-by: Stefan Richter <stefanr@s5r6.in-berlin.de> Signed-off-by: Mauro Carvalho Chehab <mchehab@osg.samsung.com>