diff options
| author | Antti Palosaari <[email protected]> | 2012-07-01 15:29:15 -0300 |
|---|---|---|
| committer | Mauro Carvalho Chehab <[email protected]> | 2012-07-05 12:59:20 -0300 |
| commit | 84431c2ae5e41dfcdba75e2f81e732664381cec9 (patch) | |
| tree | 4d9e68a8180244b70fc73430218b7dcaadd5fda7 | |
| parent | 36ad92e06e4777e3c3c433797aa89c6a6e7d2fd2 (diff) | |
[media] tda10071: fix DiSEqC message len check
Message length check was wrong which could cause garbage sent to LNB,
but only in case garbage got from the userspace application.
Reported-by: Dan Carpenter <[email protected]>
Signed-off-by: Antti Palosaari <[email protected]>
Signed-off-by: Mauro Carvalho Chehab <[email protected]>
| -rw-r--r-- | drivers/media/dvb/frontends/tda10071.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/media/dvb/frontends/tda10071.c b/drivers/media/dvb/frontends/tda10071.c index c21bc92d2811..3a1b6c0ac4ae 100644 --- a/drivers/media/dvb/frontends/tda10071.c +++ b/drivers/media/dvb/frontends/tda10071.c @@ -287,7 +287,7 @@ static int tda10071_diseqc_send_master_cmd(struct dvb_frontend *fe, dbg("%s: msg_len=%d", __func__, diseqc_cmd->msg_len); - if (diseqc_cmd->msg_len < 3 || diseqc_cmd->msg_len > 16) { + if (diseqc_cmd->msg_len < 3 || diseqc_cmd->msg_len > 6) { ret = -EINVAL; goto error; } |