Skip to contentSkip to conversation

av7110: potential divide by zero

PATCH New Dan Carpenter 1 participant 1 message Nov 10, 2015

Subsystems (2)
lore
Share & tools
lore
#0 lore raw

PATCH 2/2 av7110: potential divide by zero

"len" comes from dvb_video_ioctl() and there is a possibility that it is zero. We do a divide by len later in the function so that's not ok.

drivers/media/pci/ttpci/av7110_av.c +3 -0
index ccb3b2c..1cf9060 100644
@@ -1045,6 +1045,9 @@ static int play_iframe(struct av7110 *av7110, char __user *buf, unsigned int len
 
 	dprintk(2, "av7110:%p, \n", av7110);
 
+	if (len = 0)
+		return 0;
+
 	if (!(av7110->playing & RP_VIDEO)) {
 		if (av7110_av_start_play(av7110, RP_VIDEO) < 0)
 			return -EBUSY;