Date: Wed, 23 Aug 2006 22:29:31 +0200 From: Ivan Radovanovic <rivan@sezampro.yu> To: freebsd-ports-bugs@freebsd.org Subject: [bug] Driver for the Lucent LT Winmodem chipset (comms/ltmdm) Message-ID: <44ECBAAB.2020706@sezampro.yu>
next in thread | raw e-mail | index | archive | help
This is a multi-part message in MIME format. --------------050502040100050208010609 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit -------- Original Message -------- Subject: [bug] Driver for the Lucent LT Winmodem chipset Date: Sun, 30 Jul 2006 10:09:51 +0200 From: Ivan Radovanovic <rivan@sezampro.yu> To: osa@FreeBSD.org I have recently found bug in ltmdm driver. Driver crashes whole system every time when phone call is received while driver is in memory. Problem is in ltmdmsio.c file, trying to read NULL pointer. I fixed this problem, in attachment are two diff files: - patch-sys-dev-ltmdm-ltmdmsio.c - patch file from directory files in ltmdm port directory. I have changed this file to include check not to read memory from NULL pointer - ltmdmsio.c.diff - diff after applying change between original ltmdmsio.c file, and ltmdmsio.c file I have changed Best regards, Ivan P.S. I am using FreeBSD 6.1, problem also existed in FreeBSD 5.x --------------050502040100050208010609 Content-Type: text/x-patch; name="ltmdmsio.c.diff" Content-Transfer-Encoding: 7bit Content-Disposition: inline; filename="ltmdmsio.c.diff" 2089c2089 < if (com->tp != 0 && com->tp->t_hotchar != 0 && recv_data == com->tp->t_hotchar) --- > if (com->tp->t_hotchar != 0 && recv_data == com->tp->t_hotchar) --------------050502040100050208010609--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?44ECBAAB.2020706>