summaryrefslogtreecommitdiffstats
path: root/drivers/media/rc
diff options
context:
space:
mode:
authorSean Young <sean@mess.org>2012-08-23 17:18:25 -0300
committerMauro Carvalho Chehab <mchehab@redhat.com>2012-09-15 11:51:28 -0300
commit586c61fd88655dfb8373ad96c03464c494667952 (patch)
tree8a7f99e565c374577496eb6484932c786704fcc0 /drivers/media/rc
parentb0c47e1ec2a5d66df4ef5d34055a919140aa386a (diff)
downloadlinux-586c61fd88655dfb8373ad96c03464c494667952.tar.bz2
[media] rc: fix buffer overrun
"[media] rc-core: move timeout and checks to lirc" introduced a buffer overrun by passing the number of bytes, rather than the number of samples, to the transmit function. Signed-off-by: Sean Young <sean@mess.org> Acked-by: David Härdeman <david@hardeman.nu> Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
Diffstat (limited to 'drivers/media/rc')
-rw-r--r--drivers/media/rc/ir-lirc-codec.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/media/rc/ir-lirc-codec.c b/drivers/media/rc/ir-lirc-codec.c
index 6ad4a0770613..569124b03de3 100644
--- a/drivers/media/rc/ir-lirc-codec.c
+++ b/drivers/media/rc/ir-lirc-codec.c
@@ -140,7 +140,7 @@ static ssize_t ir_lirc_transmit_ir(struct file *file, const char __user *buf,
goto out;
}
- ret = dev->tx_ir(dev, txbuf, (u32)n);
+ ret = dev->tx_ir(dev, txbuf, count);
if (ret < 0)
goto out;