Source-Changes-D archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

CVS commit: src/sys/dev/bluetooth



> Module Name:    src
> Committed By:   christos
> Date:           Thu Apr 16 19:53:19 UTC 2015
> 
> Modified Files:
>         src/sys/dev/bluetooth: btmagic.c
>
> Log Message:
> CID 1293640/1 memory corruption/overrun
>
> To generate a diff of this commit:
> cvs rdiff -u -r1.12 -r1.13 src/sys/dev/bluetooth/btmagic.c

http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/dev/bluetooth/btmagic.c.diff?r1=1.12&r2=1.13

actually, this seems a false positive since id is extracted from the 
report as an unsigned 4-bit value and the array has 16 elements because of 
that.

interestingly, if this were an issue, there is another place where this 
would be the same, in btmagic_input_magicm() but Coverity did not pick 
that up

iain


Home | Main Index | Thread Index | Old Index