| commit | 87be424a9a4be41df26b25b3360969211cedd5d1 | |
| author | Christopher Brannon <chris@the-brannons.com> | |
| Mon, 21 Feb 2011 14:07:10 +0000 (21 14:07 +0000) | ||
| committer | Greg Kroah-Hartman <gregkh@suse.de> | |
| Wed, 23 Feb 2011 22:39:09 +0000 (23 14:39 -0800) | ||
| tree | cf0cfa4d90a083e79904f5a5e0b2c9270a25deae | treesnapshot (tar.gz zip) |
| parent | 1af4791552e462b37d0174407dc3173917e35ea0 | commitdiff |
Staging: speakup: fix an out-of-bounds error.
The cur_item variable from keyhelp.c is an index into a table of
messages. The following condition should always hold:
MSG_FUNCNAMES_START + cur_item <= MSG_FUNCNAMES_END.
The check in keyhelp.c was wrong. It allowed cur_item to be
incremented to an out-of-bounds value.
Signed-off-by: Christopher Brannon <chris@the-brannons.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
The cur_item variable from keyhelp.c is an index into a table of
messages. The following condition should always hold:
MSG_FUNCNAMES_START + cur_item <= MSG_FUNCNAMES_END.
The check in keyhelp.c was wrong. It allowed cur_item to be
incremented to an out-of-bounds value.
Signed-off-by: Christopher Brannon <chris@the-brannons.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
| drivers/staging/speakup/keyhelp.c | diffblobblamehistory |