linux/drivers/char/rio
Eric Sesterhenn / Snakebyte 84ea77635b Overrun in drivers/char/rio/riocmd.c
This got somehow lost in the noise.  This fixes coverity bug id #1025, if
Rup is greater or equal to MAX_RUP, we run past the Mapping Array.

Signed-off-by: Eric Sesterhenn <snakebyte@gmx.de>
Cc: Jiri Slaby <jirislaby@gmail.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2007-05-11 08:29:34 -07:00
..
Makefile [PATCH] rio driver rework continued #5 2006-03-24 07:33:29 -08:00
board.h [PATCH] rio: more header cleanup 2006-03-24 07:33:28 -08:00
cirrus.h [PATCH] Yet more rio cleaning (1 of 2) 2006-03-24 07:33:29 -08:00
cmdblk.h [PATCH] rio driver rework continued #3 2006-03-24 07:33:29 -08:00
cmdpkt.h [PATCH] rio driver rework continued #1 2006-03-24 07:33:29 -08:00
daemon.h [PATCH] trivial annotations in rio 2006-05-27 02:26:14 -04:00
errors.h [PATCH] lindent rio drivers 2006-01-11 18:42:14 -08:00
func.h Various drivers' irq handlers: kill dead code, needless casts 2006-10-06 15:00:58 -04:00
host.h [PATCH] Char: correct pci_get_device changes 2006-10-21 13:35:05 -07:00
link.h [PATCH] Yet more rio cleaning (1 of 2) 2006-03-24 07:33:29 -08:00
linux_compat.h [PATCH] Yet more rio cleaning (1 of 2) 2006-03-24 07:33:29 -08:00
map.h [PATCH] Yet more rio cleaning (1 of 2) 2006-03-24 07:33:29 -08:00
param.h [PATCH] Yet more rio cleaning (1 of 2) 2006-03-24 07:33:29 -08:00
parmmap.h [PATCH] Yet more rio cleaning (1 of 2) 2006-03-24 07:33:29 -08:00
pci.h [PATCH] lindent rio drivers 2006-01-11 18:42:14 -08:00
phb.h [PATCH] Yet more rio cleaning (1 of 2) 2006-03-24 07:33:29 -08:00
pkt.h [PATCH] rio: more header cleanup 2006-03-24 07:33:28 -08:00
port.h [PATCH] trivial annotations in rio 2006-05-27 02:26:14 -04:00
protsts.h [PATCH] lindent rio drivers 2006-01-11 18:42:14 -08:00
rio.h [PATCH] trivial annotations in rio 2006-05-27 02:26:14 -04:00
rio_linux.c rio: typo in bitwise AND expression. 2007-02-17 18:57:09 +01:00
rio_linux.h Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
rioboard.h [PATCH] lindent rio drivers 2006-01-11 18:42:14 -08:00
rioboot.c [PATCH] bogus order of copy_from_user() arguments 2006-05-27 02:26:32 -04:00
riocmd.c Overrun in drivers/char/rio/riocmd.c 2007-05-11 08:29:34 -07:00
rioctrl.c [PATCH] rio: fix array checking 2006-10-16 08:27:54 -07:00
riodrvr.h [PATCH] rio driver rework continued #1 2006-03-24 07:33:29 -08:00
rioinfo.h [PATCH] lindent rio drivers 2006-01-11 18:42:14 -08:00
rioinit.c Fix misc .c/.h comment typos 2006-11-30 05:24:39 +01:00
riointr.c [PATCH] Char: tty_wakeup cleanup 2007-02-11 10:51:26 -08:00
rioioctl.h [PATCH] Final rio polish 2006-05-15 11:20:57 -07:00
rioparam.c Fix misc .c/.h comment typos 2006-11-30 05:24:39 +01:00
rioroute.c [PATCH] uses of ->Copy() in rioroute are bogus 2006-05-27 02:26:40 -04:00
riospace.h [PATCH] lindent rio drivers 2006-01-11 18:42:14 -08:00
riotable.c [PATCH] missing readb/readw in rio 2006-05-27 02:27:23 -04:00
riotty.c [PATCH] trivial annotations in rio 2006-05-27 02:26:14 -04:00
route.h [PATCH] lindent rio drivers 2006-01-11 18:42:14 -08:00
rup.h [PATCH] rio driver rework continued #1 2006-03-24 07:33:29 -08:00
unixrup.h [PATCH] trivial annotations in rio 2006-05-27 02:26:14 -04:00