diff options
| author | Mauro Carvalho Chehab <mchehab@infradead.org> | 2007-11-05 11:41:50 (GMT) |
|---|---|---|
| committer | Mauro Carvalho Chehab <mchehab@infradead.org> | 2008-01-25 21:02:01 (GMT) |
| commit | b873e1a3ccf9e04d2de85db0d510ec4b793fe569 (patch) | |
| tree | 7f5e324fdfab0d11165486230407f7d55f85f855 | |
| parent | e7a2bc8a756e5c0adc6804dd7702442a06174b74 (diff) | |
| download | linux-b873e1a3ccf9e04d2de85db0d510ec4b793fe569.tar.xz | |
V4L/DVB (6559): Fix a buffer overflow at xc2028_get_reg
Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>
| -rw-r--r-- | drivers/media/video/tuner-xc2028.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/drivers/media/video/tuner-xc2028.c b/drivers/media/video/tuner-xc2028.c index 80d1402..b4c88ed 100644 --- a/drivers/media/video/tuner-xc2028.c +++ b/drivers/media/video/tuner-xc2028.c @@ -94,13 +94,13 @@ struct xc2028_data { static int xc2028_get_reg(struct xc2028_data *priv, u16 reg) { int rc; - unsigned char buf[1]; + unsigned char buf[2]; tuner_info("%s called\n", __FUNCTION__); buf[0] = reg; - i2c_send(rc, priv, buf, sizeof(buf)); + i2c_send(rc, priv, buf, 1); if (rc < 0) return rc; |