drivers/media/platform/vivid/vivid-radio-rx.c:198 
vivid_radio_rx_s_hw_freq_seek() error: buffer overflow 'vivid_radio_bands' 3 <= 
3

Signed-off-by: Mauro Carvalho Chehab <[email protected]>

diff --git a/drivers/media/platform/vivid/vivid-radio-rx.c 
b/drivers/media/platform/vivid/vivid-radio-rx.c
index c7651a506668..f99092ca8f5c 100644
--- a/drivers/media/platform/vivid/vivid-radio-rx.c
+++ b/drivers/media/platform/vivid/vivid-radio-rx.c
@@ -195,6 +195,8 @@ int vivid_radio_rx_s_hw_freq_seek(struct file *file, void 
*fh, const struct v4l2
                        if (dev->radio_rx_freq >= 
vivid_radio_bands[band].rangelow &&
                            dev->radio_rx_freq <= 
vivid_radio_bands[band].rangehigh)
                                break;
+               if (band == TOT_BANDS)
+                       return -EINVAL;
                low = vivid_radio_bands[band].rangelow;
                high = vivid_radio_bands[band].rangehigh;
        }
-- 
2.1.0

--
To unsubscribe from this list: send the line "unsubscribe linux-media" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to