alistair23-linux/drivers/isdn/hardware/eicon
Dan Carpenter c101cff901 isdn: off by one in connect_res()
The bug here is that we use "Reject" as the index into the cau_t[] array
in the else path.  Since the cau_t[] has 9 elements if Reject == 9 then
we are reading beyond the end of the array.

My understanding of the code is that it's saying that if Reject is 1 or
too high then that's invalid and we should hang up.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2015-02-02 19:33:18 -08:00
..
adapter.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
capi20.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
capidtmf.c isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
capidtmf.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
capifunc.c isdn/eicon: use standard __init,__exit function markup 2012-04-27 00:03:34 -04:00
capifunc.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
capimain.c isdn/eicon: use standard __init,__exit function markup 2012-04-27 00:03:34 -04:00
cardtype.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
cp_vers.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
dadapter.c isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
dadapter.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
debug.c isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
debug_if.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
debuglib.c isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
debuglib.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
dfifo.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
di.c isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
di.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
di_dbg.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
di_defs.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
did_vers.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
diddfunc.c isdn/eicon: use standard __init,__exit function markup 2012-04-27 00:03:34 -04:00
diva.c isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
diva.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
diva_didd.c isdn/eicon: use standard __init,__exit function markup 2012-04-27 00:03:34 -04:00
diva_dma.c isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
diva_dma.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
diva_pci.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
divacapi.h treewide: Replace incomming with incoming in all comments and strings 2013-01-03 16:15:49 +01:00
divamnt.c isdn/eicon: use standard __init,__exit function markup 2012-04-27 00:03:34 -04:00
divasfunc.c isdn/eicon: use standard __init,__exit function markup 2012-04-27 00:03:34 -04:00
divasi.c isdn/eicon: use standard __init,__exit function markup 2012-04-27 00:03:34 -04:00
divasmain.c isdn: remove deprecated IRQF_DISABLED 2013-10-17 15:13:20 -04:00
divasproc.c procfs: new helper - PDE_DATA(inode) 2013-04-09 14:13:32 -04:00
divasync.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
dqueue.c isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
dqueue.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
dsp_defs.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
dsp_tst.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
dspdids.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
dsrv4bri.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
dsrv_bri.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
dsrv_pri.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
entity.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
helpers.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
idifunc.c isdn/eicon: use standard __init,__exit function markup 2012-04-27 00:03:34 -04:00
io.c isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
io.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
istream.c isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
Kconfig Use menuconfig objects: ISDN: CONFIG_CAPI_EICON 2007-07-17 10:23:06 -07:00
kst_ifc.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
maintidi.c isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
maintidi.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
Makefile Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
man_defs.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
mdm_msg.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
message.c isdn: off by one in connect_res() 2015-02-02 19:33:18 -08:00
mi_pc.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
mntfunc.c isdn/eicon: use standard __init,__exit function markup 2012-04-27 00:03:34 -04:00
os_4bri.c isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
os_4bri.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
os_bri.c isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
os_bri.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
os_capi.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
os_pri.c isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
os_pri.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
pc.h treewide: Replace incomming with incoming in all comments and strings 2013-01-03 16:15:49 +01:00
pc_init.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
pc_maint.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
pkmaint.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
platform.h isdn/eicon: use standard __init,__exit function markup 2012-04-27 00:03:34 -04:00
pr_pc.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
s_4bri.c isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
s_bri.c isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
s_pri.c isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
sdp_hdr.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
um_idi.c isdn: eicon: free pointer after using it in log msg in divas_um_idi_delete_entity() 2013-10-02 16:00:59 -04:00
um_idi.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
um_xdi.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
xdi_adapter.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00
xdi_msg.h drivers: isdn: eicon: xdi_msg.h: Fix typo in #ifndef 2014-08-22 11:31:30 -07:00
xdi_vers.h isdn: whitespace coding style cleanup 2012-02-21 09:04:01 -08:00