Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 23 Aug 2006 22:29:31 +0200
From:      Ivan Radovanovic <rivan@sezampro.yu>
To:        freebsd-ports-bugs@freebsd.org
Subject:   [bug] Driver for the Lucent LT Winmodem chipset (comms/ltmdm)
Message-ID:  <44ECBAAB.2020706@sezampro.yu>

next in thread | raw e-mail | index | archive | help
This is a multi-part message in MIME format.
--------------050502040100050208010609
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit



-------- Original Message --------
Subject: 	[bug] Driver for the Lucent LT Winmodem chipset
Date: 	Sun, 30 Jul 2006 10:09:51 +0200
From: 	Ivan Radovanovic <rivan@sezampro.yu>
To: 	osa@FreeBSD.org



I have recently found bug in ltmdm driver. Driver crashes whole system 
every time when phone call is received while driver is in memory. Problem is 
in ltmdmsio.c file, trying to read NULL pointer. I fixed this problem, 
in attachment are two diff files:
- patch-sys-dev-ltmdm-ltmdmsio.c - patch file from directory files in 
ltmdm port directory. I have changed this file to include check not to 
read memory from NULL pointer
- ltmdmsio.c.diff - diff after applying change between original 
ltmdmsio.c file, and ltmdmsio.c file I have changed

Best regards,
Ivan

P.S.
I am using FreeBSD 6.1, problem also existed in FreeBSD 5.x



--------------050502040100050208010609
Content-Type: text/x-patch;
 name="ltmdmsio.c.diff"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
 filename="ltmdmsio.c.diff"

2089c2089
<             if (com->tp != 0 && com->tp->t_hotchar != 0 && recv_data == com->tp->t_hotchar)
---
>             if (com->tp->t_hotchar != 0 && recv_data == com->tp->t_hotchar)



--------------050502040100050208010609--




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?44ECBAAB.2020706>