array overrun in st7554_open

Bug #1832718 reported by Colin Ian King
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
sl-modem (Ubuntu)
Fix Released
Medium
Colin Ian King

Bug Description

In the dkms module, there is an array overrun when minor is equal to the size of array st7554_table in st7554_open. Fix this by making the comparison to be >= rather than >.

Detected using static analysis with Coverity. I will get an upload for this fix sorted out in the next 48 hours.

Tags: patch
Changed in sl-modem (Ubuntu):
importance: Undecided → Medium
assignee: nobody → Colin Ian King (colin-king)
description: updated
Changed in sl-modem (Ubuntu):
status: New → In Progress
milestone: none → ubuntu-19.10
Revision history for this message
Colin Ian King (colin-king) wrote :
Revision history for this message
Colin Ian King (colin-king) wrote :
tags: added: patch
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package sl-modem - 2.9.11~20110321-15ubuntu2

---------------
sl-modem (2.9.11~20110321-15ubuntu2) eoan; urgency=medium

  * Fix array overrun of st7554_table in st7554_open (LP: #1832718)
    - fixes array bounds checking error of an index into the table.

 -- Colin Ian King <email address hidden> Thu, 13 Jun 2019 12:45:17 +0100

Changed in sl-modem (Ubuntu):
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.