[Bug 1832718] [NEW] array overrun in st7554_open

Colin Ian King 1832718 at bugs.launchpad.net
Thu Jun 13 11:42:53 UTC 2019


Public bug reported:

In the dkms module, there is an array overrun when minor is equal to the
size of array st7554_table in st7554_open. Fix this by making the
comparison to be >= rather than >.

Detected using static analysis with Coverity. I will get an upload for
this fix sorted out in the next 48 hours.

** Affects: sl-modem (Ubuntu)
     Importance: Medium
     Assignee: Colin Ian King (colin-king)
         Status: In Progress

** Changed in: sl-modem (Ubuntu)
   Importance: Undecided => Medium

** Changed in: sl-modem (Ubuntu)
     Assignee: (unassigned) => Colin Ian King (colin-king)

** Description changed:

- In the dkms module, there is an array overrun when minor is equal to the size of
- array st7554_table in st7554_open. Fix this by making the comparison to be >= rather than >.
+ In the dkms module, there is an array overrun when minor is equal to the
+ size of array st7554_table in st7554_open. Fix this by making the
+ comparison to be >= rather than >.
  
  Detected using static analysis with Coverity. I will get an upload for
  this fix sorted out in the next 48 hours.

** Changed in: sl-modem (Ubuntu)
       Status: New => In Progress

** Changed in: sl-modem (Ubuntu)
    Milestone: None => ubuntu-19.10

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to sl-modem in Ubuntu.
https://bugs.launchpad.net/bugs/1832718

Title:
  array overrun in st7554_open

Status in sl-modem package in Ubuntu:
  In Progress

Bug description:
  In the dkms module, there is an array overrun when minor is equal to
  the size of array st7554_table in st7554_open. Fix this by making the
  comparison to be >= rather than >.

  Detected using static analysis with Coverity. I will get an upload for
  this fix sorted out in the next 48 hours.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sl-modem/+bug/1832718/+subscriptions



More information about the foundations-bugs mailing list