| commit | 5a1972c8472fafd519a68b689fdcaf33ec857945 | |
| author | Stefan Weil <sw@weilnetz.de> | |
| Fri, 31 Aug 2012 20:21:21 +0000 (31 22:21 +0200) | ||
| committer | Alexander Graf <agraf@suse.de> | |
| Thu, 4 Oct 2012 13:54:18 +0000 (4 15:54 +0200) | ||
| tree | 2f940df27461b514676b6316f7fcd11d3e2d14cb | treesnapshot (tar.gz zip) |
| parent | ace9a2cbac9b2949aadc176ffa83a1d2a0873e2c | commitdiff |
ppc405_uc: Fix buffer overflow
Report from smatch:
ppc405_uc.c:209 dcr_read_pob(12) error: buffer overflow 'pob->besr' 2 <= 2
ppc405_uc.c:232 dcr_write_pob(12) error: buffer overflow 'pob->besr' 2 <= 2
The old code reads and writes besr[POB0_BESR1 - POB0_BESR0] or besr[2]
which is one too much.
Signed-off-by: Stefan Weil <sw@weilnetz.de>
Reviewed-by: Andreas Färber <afaerber@suse.de>
Signed-off-by: Alexander Graf <agraf@suse.de>
Report from smatch:
ppc405_uc.c:209 dcr_read_pob(12) error: buffer overflow 'pob->besr' 2 <= 2
ppc405_uc.c:232 dcr_write_pob(12) error: buffer overflow 'pob->besr' 2 <= 2
The old code reads and writes besr[POB0_BESR1 - POB0_BESR0] or besr[2]
which is one too much.
Signed-off-by: Stefan Weil <sw@weilnetz.de>
Reviewed-by: Andreas Färber <afaerber@suse.de>
Signed-off-by: Alexander Graf <agraf@suse.de>
| hw/ppc405_uc.c | diffblobblamehistory |