From: Adrian Bunk <bunk@stusta.de>
Date: Thu, 9 Nov 2006 08:52:07 +0000 (+0100)
Subject: drivers/telephony/ixj: fix an array overrun
X-Git-Tag: v2.6.16.32-rc1~16
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=9e914f50ac8359a5e8ba920976ef72121cbb6044;p=people%2Fms%2Flinux.git

drivers/telephony/ixj: fix an array overrun

The Coverity checker noted that in
drivers/telephony/ixj.c:ixj_build_filter_cadence(), filter_en[4] or
filter_en[5] could be written to.

Signed-off-by: Adrian Bunk <bunk@stusta.de>
---

diff --git a/drivers/telephony/ixj.h b/drivers/telephony/ixj.h
index fbea4541c234..8d69bcdc29c9 100644
--- a/drivers/telephony/ixj.h
+++ b/drivers/telephony/ixj.h
@@ -1295,7 +1295,7 @@ typedef struct {
 	Proc_Info_Type Info_write;
 	unsigned short frame_count;
 	unsigned int filter_hist[4];
-	unsigned char filter_en[4];
+	unsigned char filter_en[6];
 	unsigned short proc_load;
 	unsigned long framesread;
 	unsigned long frameswritten;