Colin Ian King 99a9ffacc1 staging: speakup: ensure we do not overrun synths array ...

synth_add allows one to add MAXSYNTHS synths to the synths array;
however it always NULLifies the next synth in the array which
means that on the MAXSYNTHS synth we get an out-of-bounds write of
the NULL to the synths array.  Make the synths array MAXSYNTHS + 1
elements in size to allow for the final NULL sentinal to avoid the
out-of-bounds write.

Issue found wit CoverityScan, CID#744671

Signed-off-by: Colin Ian King <colin.king@canonical.com>
Reviewed-by: Samuel Thibault <samuel.thibault@ens-lyon.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2016-08-15 19:14:54 +02:00

..

buffers.c

…

DefaultKeyAssignments

…

devsynth.c

Staging: speakup: Remove space after cast

2016-08-15 19:14:53 +02:00

fakekey.c

…

i18n.c

…

i18n.h

…

Kconfig

…

keyhelp.c

…

kobjects.c

…

main.c

Staging: speakup: Clear hi font bit from attributes

2016-03-28 07:30:36 -07:00

Makefile

…

selection.c

tty: Replace TTY_THROTTLED bit tests with tty_throttled()

2016-04-30 09:26:55 -07:00

serialio.c

…

serialio.h

staging: speakup: fix type mismatch warnings

2016-03-28 07:30:36 -07:00

speakup_acnt.h

…

speakup_acntpc.c

…

speakup_acntsa.c

…

speakup_apollo.c

…

speakup_audptr.c

…

speakup_bns.c

…

speakup_decext.c

…

speakup_decpc.c

…

speakup_dectlk.c

…

speakup_dtlk.c

…

speakup_dtlk.h

…

speakup_dummy.c

…

speakup_keypc.c

…

speakup_ltlk.c

…

speakup_soft.c

…

speakup_spkout.c

…

speakup_txprt.c

…

speakup.h

…

speakupmap.h

…

speakupmap.map

…

spk_priv_keyinfo.h

…

spk_priv.h

…

spk_types.h

…

spkguide.txt

…

synth.c

staging: speakup: ensure we do not overrun synths array

2016-08-15 19:14:54 +02:00

thread.c

…

TODO

…

varhandlers.c

…