aboutsummaryrefslogtreecommitdiffstats
path: root/drivers/media
diff options
context:
space:
mode:
authorMauro Carvalho Chehab <mchehab@infradead.org>2007-11-05 06:41:50 -0500
committerMauro Carvalho Chehab <mchehab@infradead.org>2008-01-25 16:02:01 -0500
commitb873e1a3ccf9e04d2de85db0d510ec4b793fe569 (patch)
tree7f5e324fdfab0d11165486230407f7d55f85f855 /drivers/media
parente7a2bc8a756e5c0adc6804dd7702442a06174b74 (diff)
V4L/DVB (6559): Fix a buffer overflow at xc2028_get_reg
Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>
Diffstat (limited to 'drivers/media')
-rw-r--r--drivers/media/video/tuner-xc2028.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/drivers/media/video/tuner-xc2028.c b/drivers/media/video/tuner-xc2028.c
index 80d14020c78d..b4c88ed12a8a 100644
--- a/drivers/media/video/tuner-xc2028.c
+++ b/drivers/media/video/tuner-xc2028.c
@@ -94,13 +94,13 @@ struct xc2028_data {
94static int xc2028_get_reg(struct xc2028_data *priv, u16 reg) 94static int xc2028_get_reg(struct xc2028_data *priv, u16 reg)
95{ 95{
96 int rc; 96 int rc;
97 unsigned char buf[1]; 97 unsigned char buf[2];
98 98
99 tuner_info("%s called\n", __FUNCTION__); 99 tuner_info("%s called\n", __FUNCTION__);
100 100
101 buf[0] = reg; 101 buf[0] = reg;
102 102
103 i2c_send(rc, priv, buf, sizeof(buf)); 103 i2c_send(rc, priv, buf, 1);
104 if (rc < 0) 104 if (rc < 0)
105 return rc; 105 return rc;
106 106