Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 3e085629 authored by Al Viro's avatar Al Viro Committed by Mauro Carvalho Chehab
Browse files

V4L/DVB (7958): fix unaligned access in av7110.c 



Signed-off-by: default avatarAl Viro <viro@zeniv.linux.org.uk>
Signed-off-by: default avatarMauro Carvalho Chehab <mchehab@infradead.org>
parent a230e55d

drivers/media/dvb/ttpci/av7110.c

+5 −4
Original line number Diff line number Diff line
@@ -51,6 +51,7 @@ 
#include <linux/crc32.h>

#include <linux/i2c.h>

#include <linux/kthread.h>

#include <asm/unaligned.h>



#include <asm/system.h>
@@ -1461,9 +1462,9 @@ static int check_firmware(struct av7110* av7110) 
	ptr += 4;



	/* check dpram file */

	crc = ntohl(*(u32*) ptr);

	crc = get_unaligned_be32(ptr);

	ptr += 4;

	len = ntohl(*(u32*) ptr);

	len = get_unaligned_be32(ptr);

	ptr += 4;

	if (len >= 512) {

		printk("dvb-ttpci: dpram file is way too big.\n");
@@ -1478,9 +1479,9 @@ static int check_firmware(struct av7110* av7110) 
	ptr += len;



	/* check root file */

	crc = ntohl(*(u32*) ptr);

	crc = get_unaligned_be32(ptr);

	ptr += 4;

	len = ntohl(*(u32*) ptr);

	len = get_unaligned_be32(ptr);

	ptr += 4;



	if (len <= 200000 || len >= 300000 ||