Commit 586c61fd authored by Sean Young's avatar Sean Young Committed by Mauro Carvalho Chehab

[media] rc: fix buffer overrun

"[media] rc-core: move timeout and checks to lirc" introduced a buffer
overrun by passing the number of bytes, rather than the number of samples,
to the transmit function.
Signed-off-by: default avatarSean Young <sean@mess.org>
Acked-by: default avatarDavid Härdeman <david@hardeman.nu>
Signed-off-by: default avatarMauro Carvalho Chehab <mchehab@redhat.com>
parent b0c47e1e
......@@ -140,7 +140,7 @@ static ssize_t ir_lirc_transmit_ir(struct file *file, const char __user *buf,
goto out;
}
ret = dev->tx_ir(dev, txbuf, (u32)n);
ret = dev->tx_ir(dev, txbuf, count);
if (ret < 0)
goto out;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment