From: Adrian Bunk <bunk@stusta.de>
To: vojtech@suse.cz
Cc: linux-input@atrey.karlin.mff.cuni, linux-kernel@vger.kernel.org
Subject: drivers/input/touchscreen/gunze.c: gunze_process_packet: invalid array access
Date: Wed, 23 Mar 2005 02:26:14 +0100 [thread overview]
Message-ID: <20050323012613.GY1948@stusta.de> (raw)
The Coverity checker found the following bug in the function
gunze_process_packet in drivers/input/touchscreen/gunze.c:
<-- snip -->
...
#define GUNZE_MAX_LENGTH 10
...
struct gunze {
...
unsigned char data[GUNZE_MAX_LENGTH];
...
};
...
static void gunze_process_packet(struct gunze* gunze, struct pt_regs *regs)
...
gunze->data[10] = 0;
...
<-- snip -->
The bug is obvious, but for a correct solution someone should know this
code better than I do.
cu
Adrian
--
"Is there not promise of rain?" Ling Tan asked suddenly out
of the darkness. There had been need of rain for many days.
"Only a promise," Lao Er said.
Pearl S. Buck - Dragon Seed
next reply other threads:[~2005-03-23 1:26 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-03-23 1:26 Adrian Bunk [this message]
2005-03-24 0:41 ` drivers/input/touchscreen/gunze.c: gunze_process_packet: invalid array access Dmitry Torokhov
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20050323012613.GY1948@stusta.de \
--to=bunk@stusta.de \
--cc=linux-input@atrey.karlin.mff.cuni \
--cc=linux-kernel@vger.kernel.org \
--cc=vojtech@suse.cz \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.