Commit 8337fc30 authored by Marton Nemeth's avatar Marton Nemeth Committed by Mauro Carvalho Chehab
Browse files

V4L/DVB (13325): gspca - pac7302/pac7311: Fix buffer overrun. 



The reg_w_seq() function expects the sequence length in entries
and not in bytes. One entry in init_7302 and init_7311 is two
bytes and not one.

Signed-off-by: default avatarMarton Nemeth <nm127@freemail.hu>
Signed-off-by: default avatarJean-Francois Moine <moinejf@free.fr>
Signed-off-by: default avatarMauro Carvalho Chehab <mchehab@redhat.com>
parent 4f7309e2

drivers/media/video/gspca/pac7302.c

+1 −1
Original line number Diff line number Diff line
@@ -571,7 +571,7 @@ static void sethvflip(struct gspca_dev *gspca_dev) 
/* this function is called at probe and resume time for pac7302 */

static int sd_init(struct gspca_dev *gspca_dev)

{

	reg_w_seq(gspca_dev, init_7302, sizeof init_7302);

	reg_w_seq(gspca_dev, init_7302, sizeof(init_7302)/2);



	return 0;

}

drivers/media/video/gspca/pac7311.c

+1 −1
Original line number Diff line number Diff line
@@ -469,7 +469,7 @@ static void sethvflip(struct gspca_dev *gspca_dev) 
/* this function is called at probe and resume time for pac7311 */

static int sd_init(struct gspca_dev *gspca_dev)

{

	reg_w_seq(gspca_dev, init_7311, sizeof init_7311);

	reg_w_seq(gspca_dev, init_7311, sizeof(init_7311)/2);



	return 0;

}