commit b196872cd65a06ad65853c4513e0d0f24452d32e
author Adrian Bunk <bunk@stusta.de> Wed Nov 08 17:44:45 2006 -0800
committer Linus Torvalds <torvalds@g5.osdl.org> Wed Nov 08 18:29:23 2006 -0800
tree 16629d0fa1cc57d04105ba0769a770ea13074200
parent 33184048dc4f9d5550d3b6a88c8e0ff92033eb6e

[PATCH] drivers/telephony/ixj: fix an array overrun

The Coverity checker noted that in
drivers/telephony/ixj.c:ixj_build_filter_cadence(), filter_en[4] or
filter_en[5] could be written to.

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>

drivers/telephony/ixj.h

diff --git a/drivers/telephony/ixj.h b/drivers/telephony/ixj.h
index fbea454..8d69bcd 100644
--- a/drivers/telephony/ixj.h
+++ b/drivers/telephony/ixj.h
@@ -1295,7 +1295,7 @@
 	Proc_Info_Type Info_write;
 	unsigned short frame_count;
 	unsigned int filter_hist[4];
-	unsigned char filter_en[4];
+	unsigned char filter_en[6];
 	unsigned short proc_load;
 	unsigned long framesread;
 	unsigned long frameswritten;