Bug 254 - One more possible out of bounds error in sb_mixer.c from Stanford Checker
Summary: One more possible out of bounds error in sb_mixer.c from Stanford Checker
Status: CLOSED CODE_FIX
Alias: None
Product: Drivers
Classification: Unclassified
Component: Sound(OSS) (show other bugs)
Hardware: i386 Linux
: P2 low
Assignee: Muli Ben-Yehuda
URL:
Keywords:
Depends on: 252
Blocks:
  Show dependency tree
 
Reported: 2003-01-03 16:51 UTC by Hanna Linder
Modified: 2004-12-02 07:00 UTC (History)
0 users

See Also:
Kernel Version:
Subsystem:
Regression: ---
Bisected commit-id:


Attachments

Description Hanna Linder 2003-01-03 16:51:11 UTC
Exact Kernel version: 2.5.48
Distribution: kernel.org
Hardware Environment: unknown
Software Environment: Stanford Checker
Problem Description:
See thread at: http://marc.theaimsgroup.com/?t=104155440600003&r=1&w=2
[BUG] Look at callstack.
/u1/acc/linux/2.5.48/sound/oss/sb_mixer.c:336:smw_mixer_set:
ERROR:BUFFER:336:336:Array bounds error: smw_mix_regs[17] indexed with [17]
[Callstack: /u1/acc/linux/2.5.48/sound/oss/sb_mixer.c:656:sb_mixer_set(_, 17, _)
-> /u1/acc/linux/2.5.48/sound/oss/sb_mixer.c:369:smw_mixer_set(_, 17, _, 100)] 
			sb_setmixer(devc, 0x0e, val);
		
			break;

		default:

Error --->
			reg = smw_mix_regs[dev];
			if (reg == 0)
				return -EINVAL;
			sb_setmixer(devc, reg, (24 - (24 * left / 100)) | 0x20);	/* 24=mute, 0=max */

Steps to reproduce:
Comment 1 Muli Ben-Yehuda 2004-03-20 13:32:47 UTC
I'm taking care of Bug #252; I'll take care of this as well. 
Comment 2 Muli Ben-Yehuda 2004-03-20 13:33:04 UTC
I'm taking care of Bug #252; I'll take care of this as well. 

Note You need to log in before you can comment on or make changes to this bug.