mirror of
git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
synced 2025-09-04 20:19:47 +08:00
If fw_csr_string() returns -ENOENT, then "name" is uninitialized. So
then the "strlen(model_names[i]) <= name_len" is true because strlen()
is unsigned and -ENOENT is type promoted to a very high positive value.
Then the "strncmp(name, model_names[i], name_len)" uses uninitialized
data because "name" is uninitialized.
Fixes:
|
||
|---|---|---|
| .. | ||
| firedtv-avc.c | ||
| firedtv-ci.c | ||
| firedtv-dvb.c | ||
| firedtv-fe.c | ||
| firedtv-fw.c | ||
| firedtv-rc.c | ||
| firedtv.h | ||
| Kconfig | ||
| Makefile | ||