summaryrefslogtreecommitdiff
path: root/drivers/media/dvb
diff options
context:
space:
mode:
authorAntti Palosaari <crope@iki.fi>2012-07-01 18:29:15 (GMT)
committerMauro Carvalho Chehab <mchehab@redhat.com>2012-07-05 15:59:20 (GMT)
commit84431c2ae5e41dfcdba75e2f81e732664381cec9 (patch)
tree4d9e68a8180244b70fc73430218b7dcaadd5fda7 /drivers/media/dvb
parent36ad92e06e4777e3c3c433797aa89c6a6e7d2fd2 (diff)
downloadlinux-84431c2ae5e41dfcdba75e2f81e732664381cec9.tar.xz
[media] tda10071: fix DiSEqC message len check
Message length check was wrong which could cause garbage sent to LNB, but only in case garbage got from the userspace application. Reported-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Antti Palosaari <crope@iki.fi> Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
Diffstat (limited to 'drivers/media/dvb')
-rw-r--r--drivers/media/dvb/frontends/tda10071.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/media/dvb/frontends/tda10071.c b/drivers/media/dvb/frontends/tda10071.c
index c21bc92..3a1b6c0 100644
--- a/drivers/media/dvb/frontends/tda10071.c
+++ b/drivers/media/dvb/frontends/tda10071.c
@@ -287,7 +287,7 @@ static int tda10071_diseqc_send_master_cmd(struct dvb_frontend *fe,
dbg("%s: msg_len=%d", __func__, diseqc_cmd->msg_len);
- if (diseqc_cmd->msg_len < 3 || diseqc_cmd->msg_len > 16) {
+ if (diseqc_cmd->msg_len < 3 || diseqc_cmd->msg_len > 6) {
ret = -EINVAL;
goto error;
}