Eric Sesterhenn / Snakebyte 84ea77635b Overrun in drivers/char/rio/riocmd.c ...

This got somehow lost in the noise.  This fixes coverity bug id #1025, if
Rup is greater or equal to MAX_RUP, we run past the Mapping Array.

Signed-off-by: Eric Sesterhenn <snakebyte@gmx.de>
Cc: Jiri Slaby <jirislaby@gmail.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

2007-05-11 08:29:34 -07:00

..

board.h

[PATCH] rio: more header cleanup

2006-03-24 07:33:28 -08:00

cirrus.h

[PATCH] Yet more rio cleaning (1 of 2)

2006-03-24 07:33:29 -08:00

cmdblk.h

[PATCH] rio driver rework continued #3

2006-03-24 07:33:29 -08:00

cmdpkt.h

[PATCH] rio driver rework continued #1

2006-03-24 07:33:29 -08:00

daemon.h

[PATCH] trivial annotations in rio

2006-05-27 02:26:14 -04:00

errors.h

[PATCH] lindent rio drivers

2006-01-11 18:42:14 -08:00

func.h

Various drivers' irq handlers: kill dead code, needless casts

2006-10-06 15:00:58 -04:00

host.h

[PATCH] Char: correct pci_get_device changes

2006-10-21 13:35:05 -07:00

link.h

[PATCH] Yet more rio cleaning (1 of 2)

2006-03-24 07:33:29 -08:00

linux_compat.h

[PATCH] Yet more rio cleaning (1 of 2)

2006-03-24 07:33:29 -08:00

Makefile

[PATCH] rio driver rework continued #5

2006-03-24 07:33:29 -08:00

map.h

[PATCH] Yet more rio cleaning (1 of 2)

2006-03-24 07:33:29 -08:00

param.h

[PATCH] Yet more rio cleaning (1 of 2)

2006-03-24 07:33:29 -08:00

parmmap.h

[PATCH] Yet more rio cleaning (1 of 2)

2006-03-24 07:33:29 -08:00

pci.h

[PATCH] lindent rio drivers

2006-01-11 18:42:14 -08:00

phb.h

[PATCH] Yet more rio cleaning (1 of 2)

2006-03-24 07:33:29 -08:00

pkt.h

[PATCH] rio: more header cleanup

2006-03-24 07:33:28 -08:00

port.h

[PATCH] trivial annotations in rio

2006-05-27 02:26:14 -04:00

protsts.h

[PATCH] lindent rio drivers

2006-01-11 18:42:14 -08:00

rio_linux.c

rio: typo in bitwise AND expression.

2007-02-17 18:57:09 +01:00

rio_linux.h

Remove obsolete #include <linux/config.h>

2006-06-30 19:25:36 +02:00

rio.h

[PATCH] trivial annotations in rio

2006-05-27 02:26:14 -04:00

rioboard.h

[PATCH] lindent rio drivers

2006-01-11 18:42:14 -08:00

rioboot.c

[PATCH] bogus order of copy_from_user() arguments

2006-05-27 02:26:32 -04:00

riocmd.c

Overrun in drivers/char/rio/riocmd.c

2007-05-11 08:29:34 -07:00

rioctrl.c

[PATCH] rio: fix array checking

2006-10-16 08:27:54 -07:00

riodrvr.h

[PATCH] rio driver rework continued #1

2006-03-24 07:33:29 -08:00

rioinfo.h

[PATCH] lindent rio drivers

2006-01-11 18:42:14 -08:00

rioinit.c

Fix misc .c/.h comment typos

2006-11-30 05:24:39 +01:00

riointr.c

[PATCH] Char: tty_wakeup cleanup

2007-02-11 10:51:26 -08:00

rioioctl.h

[PATCH] Final rio polish

2006-05-15 11:20:57 -07:00

rioparam.c

Fix misc .c/.h comment typos

2006-11-30 05:24:39 +01:00

rioroute.c

[PATCH] uses of ->Copy() in rioroute are bogus

2006-05-27 02:26:40 -04:00

riospace.h

[PATCH] lindent rio drivers

2006-01-11 18:42:14 -08:00

riotable.c

[PATCH] missing readb/readw in rio

2006-05-27 02:27:23 -04:00

riotty.c

[PATCH] trivial annotations in rio

2006-05-27 02:26:14 -04:00

route.h

[PATCH] lindent rio drivers

2006-01-11 18:42:14 -08:00

rup.h

[PATCH] rio driver rework continued #1

2006-03-24 07:33:29 -08:00

unixrup.h

[PATCH] trivial annotations in rio

2006-05-27 02:26:14 -04:00