[PATCH 1/1 v2] media: dib9000: avoid out of bound access

2014-06-19 Thread Heinrich Schuchardt
This updated patch also fixes out of bound access to b[]. In dib9000_risc_apb_access_write() an out of bound access to mb[]. The current test to avoid out of bound access to mb[] is insufficient. For len = 19 non-existent mb[10] will be accessed. For odd values of len b[] is accessed out of

Re: [PATCH 1/1 v2] media: dib9000: avoid out of bound access

2014-06-19 Thread Kees Cook
On Thu, Jun 19, 2014 at 7:49 AM, Heinrich Schuchardt xypron.g...@gmx.de wrote: This updated patch also fixes out of bound access to b[]. In dib9000_risc_apb_access_write() an out of bound access to mb[]. The current test to avoid out of bound access to mb[] is insufficient. For len = 19