forked from Minki/linux
2505a210fc
If fw_csr_string() returns -ENOENT, then "name" is uninitialized. So
then the "strlen(model_names[i]) <= name_len" is true because strlen()
is unsigned and -ENOENT is type promoted to a very high positive value.
Then the "strncmp(name, model_names[i], name_len)" uses uninitialized
data because "name" is uninitialized.
Fixes:
|
||
---|---|---|
.. | ||
firedtv-avc.c | ||
firedtv-ci.c | ||
firedtv-dvb.c | ||
firedtv-fe.c | ||
firedtv-fw.c | ||
firedtv-rc.c | ||
firedtv.h | ||
Kconfig | ||
Makefile |