[Bug 1832718] Re: array overrun in st7554_open

[Launchpad Bug Tracker]

This bug was fixed in the package sl-modem - 2.9.11~20110321-15ubuntu2

---------------
sl-modem (2.9.11~20110321-15ubuntu2) eoan; urgency=medium

  * Fix array overrun of st7554_table in st7554_open (LP: #1832718)
    - fixes array bounds checking error of an index into the table.

 -- Colin Ian King <colin.king at canonical.com>  Thu, 13 Jun 2019 12:45:17
+0100

** Changed in: sl-modem (Ubuntu)
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to sl-modem in Ubuntu.
https://bugs.launchpad.net/bugs/1832718

Title:
  array overrun in st7554_open

Status in sl-modem package in Ubuntu:
  Fix Released

Bug description:
  In the dkms module, there is an array overrun when minor is equal to
  the size of array st7554_table in st7554_open. Fix this by making the
  comparison to be >= rather than >.

  Detected using static analysis with Coverity. I will get an upload for
  this fix sorted out in the next 48 hours.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sl-modem/+bug/1832718/+subscriptions