Skip to content

Commit

Permalink
[media] tda10071: fix DiSEqC message len check
Browse files Browse the repository at this point in the history
Message length check was wrong which could cause garbage sent to LNB,
but only in case garbage got from the userspace application.

Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Antti Palosaari <crope@iki.fi>
Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
  • Loading branch information
Antti Palosaari authored and Mauro Carvalho Chehab committed Jul 5, 2012
1 parent 36ad92e commit 84431c2
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion drivers/media/dvb/frontends/tda10071.c
Original file line number Diff line number Diff line change
Expand Up @@ -287,7 +287,7 @@ static int tda10071_diseqc_send_master_cmd(struct dvb_frontend *fe,

dbg("%s: msg_len=%d", __func__, diseqc_cmd->msg_len);

if (diseqc_cmd->msg_len < 3 || diseqc_cmd->msg_len > 16) {
if (diseqc_cmd->msg_len < 3 || diseqc_cmd->msg_len > 6) {
ret = -EINVAL;
goto error;
}
Expand Down

0 comments on commit 84431c2

Please sign in to comment.