diff options
| author | Mauro Carvalho Chehab <mchehab@osg.samsung.com> | 2016-02-19 20:02:30 +0300 |
|---|---|---|
| committer | Mauro Carvalho Chehab <mchehab@osg.samsung.com> | 2016-02-23 13:15:29 +0300 |
| commit | 60ad768933ec16e784087f6d07aeeb0e91149221 (patch) | |
| tree | 483445e71574eceada18c2fcb19cd9921d3f3705 /drivers/media/i2c | |
| parent | 8e9a8b1212da7a68eb57beec6e16f80ff4f27e6f (diff) | |
| download | linux-60ad768933ec16e784087f6d07aeeb0e91149221.tar.xz | |
[media] tvp5150: don't go past decoder->input_ent array
drivers/media/i2c/tvp5150.c:1394 tvp5150_parse_dt() warn: buffer overflow 'decoder->input_ent' 3 <= 3
Reviewed-by: Javier Martinez Canillas <javier@osg.samsung.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@osg.samsung.com>
Diffstat (limited to 'drivers/media/i2c')
| -rw-r--r-- | drivers/media/i2c/tvp5150.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/media/i2c/tvp5150.c b/drivers/media/i2c/tvp5150.c index ef393f5daf2a..ff18444e19e4 100644 --- a/drivers/media/i2c/tvp5150.c +++ b/drivers/media/i2c/tvp5150.c @@ -1386,7 +1386,7 @@ static int tvp5150_parse_dt(struct tvp5150 *decoder, struct device_node *np) goto err_connector; } - if (input_type > TVP5150_INPUT_NUM) { + if (input_type >= TVP5150_INPUT_NUM) { ret = -EINVAL; goto err_connector; } |