aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMauro Carvalho Chehab <mchehab@infradead.org>2007-11-05 08:41:50 -0300
committerMauro Carvalho Chehab <mchehab@infradead.org>2008-01-25 19:02:01 -0200
commitb873e1a3ccf9e04d2de85db0d510ec4b793fe569 (patch)
tree7f5e324fdfab0d11165486230407f7d55f85f855
parente7a2bc8a756e5c0adc6804dd7702442a06174b74 (diff)
V4L/DVB (6559): Fix a buffer overflow at xc2028_get_reg
Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>
-rw-r--r--drivers/media/video/tuner-xc2028.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/drivers/media/video/tuner-xc2028.c b/drivers/media/video/tuner-xc2028.c
index 80d14020c78..b4c88ed12a8 100644
--- a/drivers/media/video/tuner-xc2028.c
+++ b/drivers/media/video/tuner-xc2028.c
@@ -94,13 +94,13 @@ struct xc2028_data {
static int xc2028_get_reg(struct xc2028_data *priv, u16 reg)
{
int rc;
- unsigned char buf[1];
+ unsigned char buf[2];
tuner_info("%s called\n", __FUNCTION__);
buf[0] = reg;
- i2c_send(rc, priv, buf, sizeof(buf));
+ i2c_send(rc, priv, buf, 1);
if (rc < 0)
return rc;