promiscuous bttv parameter checking (2.4.21-pre3)

From: Alexandre Pereira Nunes (alex@PolesApart.dhs.org)
Date: Wed Feb 05 2003 - 15:29:36 EST


Hi,

As of linux 2.4.21-pre3, bttv driver fails to check the "channel"
attribute correctly. This is caused because there is no check for
negative values on the channel parameter (at least ) in ioctls
VIDIOCGCHAN (bttv-driver.c:1510) and VIDIOCSCHAN (same file, at line
1537). Negative parameters, though invalid, are passed along.

While in the first case (VIDIOCGCHAN) I see no dark effects other than
the wacky channel name in the name member of the returned structure, it
is possible that passing the negative value in VIDIOCSCHAN spots
side-effects, specially in the function bt848_muxsel.

(A cc: went to the maintainer. Any questions please cc: me since I'm not
subscribed to the kernel mailing list).

Best regards,

Alexandre

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Fri Feb 07 2003 - 22:00:18 EST