dma_ip_drivers
dma_ip_drivers copied to clipboard
engine_status_dump buffer overflow
In function engine_status_dump() there is char buffer[256]. If engine status is 0xFFFFFFFF, which means all possible flags, calling engine_status_dump() causes buffer overflow and kernel crash. This is impossible in normal conditions and could only be triggered by another problem. But function engine_status_dump() is a diagnostic function and thus should not lead to crash even if input makes no sense. The problem could be fixed by increasing buffer size.