linux

mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2025-01-10 07:10:27 +00:00

History

Dan Carpenter c101cff901 isdn: off by one in connect_res()

The bug here is that we use "Reject" as the index into the cau_t[] array
in the else path.  Since the cau_t[] has 9 elements if Reject == 9 then
we are reading beyond the end of the array.

My understanding of the code is that it's saying that if Reject is 1 or
too high then that's invalid and we should hang up.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2015-02-02 19:33:18 -08:00

act2000

isdn: replace del_timer by del_timer_sync

2014-03-27 15:28:06 -04:00

capi

isdn/capi: correct argument types of command_2_index

2014-12-10 15:06:10 -05:00

divert

isdn: divert, hysdn: fix interruptible_sleep_on race

2014-02-26 16:06:13 -05:00

gigaset

isdn/gigaset: enable Kernel CAPI support by default