[media] cec-adap: prevent write to out-of-bounds array index
authorHans Verkuil <hans.verkuil@cisco.com>
Thu, 30 Jun 2016 10:08:53 +0000 (07:08 -0300)
committerMauro Carvalho Chehab <mchehab@s-opensource.com>
Fri, 8 Jul 2016 21:32:04 +0000 (18:32 -0300)
commitf8db65fe4336baf818dde5d226eb3d35773e2371
tree4b3ac9d879cc882b4d2c24353c894d00fc7ac088
parent12655445a2adc292db3352bbe80e43bd243517aa
[media] cec-adap: prevent write to out-of-bounds array index

CEC_MSG_REPORT_PHYSICAL_ADDR can theoretically be received from
an unregistered device, but in that case the code should not attempt
to write the received physical address to the phys_addrs array.

That would be pointless since there can be multiple unregistered
devices that report a physical address. We just ignore those.

While at it, improve the dprintk since it would attempt to read
from that array as well with the same out-of-bounds problem.

Signed-off-by: Hans Verkuil <hans.verkuil@cisco.com>
Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>
drivers/staging/media/cec/cec-adap.c