From: Adrian Bunk <bunk@stusta.de>
Date: Thu, 9 Nov 2006 01:44:45 +0000 (-0800)
Subject: [PATCH] drivers/telephony/ixj: fix an array overrun
X-Git-Tag: v2.6.19-rc6~58
X-Git-Url: https://err.no/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b196872cd65a06ad65853c4513e0d0f24452d32e;p=linux-2.6

[PATCH] drivers/telephony/ixj: fix an array overrun

The Coverity checker noted that in
drivers/telephony/ixj.c:ixj_build_filter_cadence(), filter_en[4] or
filter_en[5] could be written to.

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
---

diff --git a/drivers/telephony/ixj.h b/drivers/telephony/ixj.h
index fbea4541c2..8d69bcdc29 100644
--- a/drivers/telephony/ixj.h
+++ b/drivers/telephony/ixj.h
@@ -1295,7 +1295,7 @@ typedef struct {
 	Proc_Info_Type Info_write;
 	unsigned short frame_count;
 	unsigned int filter_hist[4];
-	unsigned char filter_en[4];
+	unsigned char filter_en[6];
 	unsigned short proc_load;
 	unsigned long framesread;
 	unsigned long frameswritten;