leandrof/linux
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Input: atkbd - fix overrun in atkbd_set_repeat_rate()

Browse Source 
This was introduced in commit 3d0f0fa0cb:
bounds checking is performed against period[32] while indexing delay[4].

Spotted by Coverity, CID 1376.

Signed-off-by: Florin Malita <fmalita@gmail.com>
Signed-off-by: Dmitry Torokhov <dtor@mail.ru>
This commit is contained in:
Florin Malita
2006-08-23 00:45:33 -04:00
committed by Dmitry Torokhov
parent 2ffc1ccad8
commit 8ea371fb6d
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
drivers/input/keyboard/atkbd.c
View File

@@ -498,7 +498,7 @@ static int atkbd_set_repeat_rate(struct atkbd *atkbd)
i++; i++;
dev->rep[REP_PERIOD] = period[i]; dev->rep[REP_PERIOD] = period[i];
while (j < ARRAY_SIZE(period) - 1 && delay[j] < dev->rep[REP_DELAY]) while (j < ARRAY_SIZE(delay) - 1 && delay[j] < dev->rep[REP_DELAY])
j++; j++;
dev->rep[REP_DELAY] = delay[j]; dev->rep[REP_DELAY] = delay[j];