Dan Carpenter c101cff901 isdn: off by one in connect_res() ... The bug here is that we use "Reject" as the index into the cau_t[] array in the else path. Since the cau_t[] has 9 elements if Reject == 9 then we are reading beyond the end of the array. My understanding of the code is that it's saying that if Reject is 1 or too high then that's invalid and we should hang up. Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2015-02-02 19:33:18 -08:00
..
adapter.h
capi20.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
capidtmf.c	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
capidtmf.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
capifunc.c	isdn/eicon: use standard __init,__exit function markup	2012-04-27 00:03:34 -04:00
capifunc.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
capimain.c	isdn/eicon: use standard __init,__exit function markup	2012-04-27 00:03:34 -04:00
cardtype.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
cp_vers.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
dadapter.c	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
dadapter.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
debug_if.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
debug.c	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
debuglib.c	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
debuglib.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
dfifo.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
di_dbg.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
di_defs.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
di.c	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
di.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
did_vers.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
diddfunc.c	isdn/eicon: use standard __init,__exit function markup	2012-04-27 00:03:34 -04:00
diva_didd.c	isdn/eicon: use standard __init,__exit function markup	2012-04-27 00:03:34 -04:00
diva_dma.c	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
diva_dma.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
diva_pci.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
diva.c	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
diva.h
divacapi.h	treewide: Replace incomming with incoming in all comments and strings	2013-01-03 16:15:49 +01:00
divamnt.c	isdn/eicon: use standard __init,__exit function markup	2012-04-27 00:03:34 -04:00
divasfunc.c	isdn/eicon: use standard __init,__exit function markup	2012-04-27 00:03:34 -04:00
divasi.c	isdn/eicon: use standard __init,__exit function markup	2012-04-27 00:03:34 -04:00
divasmain.c	isdn: remove deprecated IRQF_DISABLED	2013-10-17 15:13:20 -04:00
divasproc.c	procfs: new helper - PDE_DATA(inode)	2013-04-09 14:13:32 -04:00
divasync.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
dqueue.c	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
dqueue.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
dsp_defs.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
dsp_tst.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
dspdids.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
dsrv4bri.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
dsrv_bri.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
dsrv_pri.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
entity.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
helpers.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
idifunc.c	isdn/eicon: use standard __init,__exit function markup	2012-04-27 00:03:34 -04:00
io.c	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
io.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
istream.c	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
Kconfig
kst_ifc.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
maintidi.c	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
maintidi.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
Makefile
man_defs.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
mdm_msg.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
message.c	isdn: off by one in connect_res()	2015-02-02 19:33:18 -08:00
mi_pc.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
mntfunc.c	isdn/eicon: use standard __init,__exit function markup	2012-04-27 00:03:34 -04:00
os_4bri.c	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
os_4bri.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
os_bri.c	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
os_bri.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
os_capi.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
os_pri.c	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
os_pri.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
pc_init.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
pc_maint.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
pc.h	treewide: Replace incomming with incoming in all comments and strings	2013-01-03 16:15:49 +01:00
pkmaint.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
platform.h	isdn/eicon: use standard __init,__exit function markup	2012-04-27 00:03:34 -04:00
pr_pc.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
s_4bri.c	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
s_bri.c	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
s_pri.c	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
sdp_hdr.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
um_idi.c	isdn: eicon: free pointer after using it in log msg in divas_um_idi_delete_entity()	2013-10-02 16:00:59 -04:00
um_idi.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
um_xdi.h
xdi_adapter.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00
xdi_msg.h	drivers: isdn: eicon: xdi_msg.h: Fix typo in #ifndef	2014-08-22 11:31:30 -07:00
xdi_vers.h	isdn: whitespace coding style cleanup	2012-02-21 09:04:01 -08:00