[PATCH 11/11] hvcbeat: fix buffer manipulation

Arnd Bergmann arnd at arndb.de
Wed Mar 5 22:51:06 EST 2008


On Wednesday 05 March 2008, Ishizaki Kou wrote:
> This patch fixes a potential bug at drivers/char/hvc_beat.c.
>  - hvc_put_term_char routine will decrement "rest" variable twice,
>    and forget to advance "buf" pointer by "nlen" bytes.
> This bug was not hit because the output handler in
> drivers/char/hvc_console.c splits given output into 16 bytes
> at maximum.
> 
> Reported-by: Timur Tabi <timur at freescale.com>
> Signed-off-by: Kou Ishizaki <kou.ishizaki at toshiba.co.jp>

Acked-by: Arnd Bergmann <arnd at arndb.de>

obviously correct



More information about the Linuxppc-dev mailing list