promiscuous bttv parameter checking (2.4.21-pre3)

Alexandre Pereira Nunes (alex@PolesApart.dhs.org)
Wed, 05 Feb 2003 18:29:36 -0200


Hi,

As of linux 2.4.21-pre3, bttv driver fails to check the "channel"
attribute correctly. This is caused because there is no check for
negative values on the channel parameter (at least ) in ioctls
VIDIOCGCHAN (bttv-driver.c:1510) and VIDIOCSCHAN (same file, at line
1537). Negative parameters, though invalid, are passed along.

While in the first case (VIDIOCGCHAN) I see no dark effects other than
the wacky channel name in the name member of the returned structure, it
is possible that passing the negative value in VIDIOCSCHAN spots
side-effects, specially in the function bt848_muxsel.

(A cc: went to the maintainer. Any questions please cc: me since I'm not
subscribed to the kernel mailing list).

Best regards,

Alexandre

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/