[Nouveau] [PATCH] drm/nouveau: fix array overflow
Ben Skeggs
skeggsb at gmail.com
Sat Dec 5 22:50:49 PST 2009
On Sat, 2009-12-05 at 18:42 +0200, Pekka Paalanen wrote:
> Noticed by sparse: in nouveau_dp_link_train(), the array 'status' was
> defined as 2 bytes, yet it was accessed for 3 bytes.
>
> Fix it by making the array size 3.
Thanks, pushed. Though, for obvious things like this just commit
away :)
Ben.
>
> Signed-off-by: Pekka Paalanen <pq at iki.fi>
> ---
> drivers/gpu/drm/nouveau/nouveau_dp.c | 3 ++-
> 1 files changed, 2 insertions(+), 1 deletions(-)
>
> diff --git a/drivers/gpu/drm/nouveau/nouveau_dp.c b/drivers/gpu/drm/nouveau/nouveau_dp.c
> index a334f17..c2d6eff 100644
> --- a/drivers/gpu/drm/nouveau/nouveau_dp.c
> +++ b/drivers/gpu/drm/nouveau/nouveau_dp.c
> @@ -271,7 +271,8 @@ nouveau_dp_link_train(struct drm_encoder *encoder)
> {
> struct drm_device *dev = encoder->dev;
> struct nouveau_encoder *nv_encoder = nouveau_encoder(encoder);
> - uint8_t config[4], status[2];
> + uint8_t config[4];
> + uint8_t status[3];
> bool cr_done, cr_max_vs, eq_done;
> int ret = 0, i, tries, voltage;
>
More information about the Nouveau
mailing list