From 0c7e2c5633cd0790dc2b127dc090ffa1412aff0d Mon Sep 17 00:00:00 2001 From: lly Date: Fri, 8 Apr 2011 10:51:34 -0400 Subject: [PATCH] V4L/DVB: gspca - pac7302/11 patches from upstream kernel.org commits 8337fc3053f4189fb64d60495ed89df5befa2a6b Fix buffer overrun. a1317135d109f4b6dd89caa1a9b2b6c8d54b09cd Bad request value in USB write --- release/src-rt/linux/linux-2.6/drivers/media/video/gspca/pac7311.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/release/src-rt/linux/linux-2.6/drivers/media/video/gspca/pac7311.c b/release/src-rt/linux/linux-2.6/drivers/media/video/gspca/pac7311.c index 052714484e..ccf57e7098 100644 --- a/release/src-rt/linux/linux-2.6/drivers/media/video/gspca/pac7311.c +++ b/release/src-rt/linux/linux-2.6/drivers/media/video/gspca/pac7311.c @@ -401,7 +401,7 @@ static void reg_w_buf(struct gspca_dev *gspca_dev, memcpy(gspca_dev->usb_buf, buffer, len); usb_control_msg(gspca_dev->dev, usb_sndctrlpipe(gspca_dev->dev, 0), - 1, /* request */ + 0, /* request */ USB_DIR_OUT | USB_TYPE_VENDOR | USB_RECIP_DEVICE, 0, /* value */ index, gspca_dev->usb_buf, len, @@ -667,9 +667,9 @@ static int sd_init(struct gspca_dev *gspca_dev) struct sd *sd = (struct sd *) gspca_dev; if (sd->sensor == SENSOR_PAC7302) - reg_w_seq(gspca_dev, init_7302, sizeof init_7302); + reg_w_seq(gspca_dev, init_7302, sizeof(init_7302)/2); else - reg_w_seq(gspca_dev, init_7311, sizeof init_7311); + reg_w_seq(gspca_dev, init_7311, sizeof(init_7311)/2); return 0; } -- 2.11.4.GIT