linux/drivers/staging/ft1000
Dan Carpenter fcbf77bf87 Staging: ft1000-usb: fix array overflow
The code here is supposed checking if we exited the loop without hitting
a break.  The problem is that in the error handling "i" is out of bounds
and it corrupts memory when we do an info->app_info[i].nRxMsgMiss++.
>From the comments, it looks like someone noticed this corruption and
updated the code, but didn't totally fix the problem.  The correct fix
is just to remove nRxMsgMiss++ from the error path.

I believe this bug can be triggered remotely.

Signed-off-by: Dan Carpenter <error27@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
2010-10-15 12:24:38 -07:00
..
ft1000-pcmcia Staging: ft1000:ft1000-pcmia: Makefile: replace the use of <module>-objs with <module>-y 2010-10-08 07:23:49 -07:00
ft1000-usb Staging: ft1000-usb: fix array overflow 2010-10-15 12:24:38 -07:00
Kconfig Staging: ft1000: mark pcmcia driver broken 2010-09-22 12:17:16 -07:00
Makefile
TODO