From owner-freebsd-ports-bugs@FreeBSD.ORG Wed Aug 23 20:29:55 2006 Return-Path: X-Original-To: freebsd-ports-bugs@freebsd.org Delivered-To: freebsd-ports-bugs@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A623516A4DE for ; Wed, 23 Aug 2006 20:29:55 +0000 (UTC) (envelope-from rivan@sezampro.yu) Received: from frontb.sezampro.yu (frontb-d.sezampro.yu [194.106.188.52]) by mx1.FreeBSD.org (Postfix) with SMTP id DDB7943D7C for ; Wed, 23 Aug 2006 20:29:54 +0000 (GMT) (envelope-from rivan@sezampro.yu) Received: from rivan@212.200.201.120.sezampro.yu [212.200.201.120] (authenticated as rivan) by SezamPro with SMTP on Wed, 23 Aug 2006 22:29:37 +0200 Message-ID: <44ECBAAB.2020706@sezampro.yu> Date: Wed, 23 Aug 2006 22:29:31 +0200 From: Ivan Radovanovic User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7.12) Gecko/20060317 X-Accept-Language: en-us, sr, sl, hr MIME-Version: 1.0 To: freebsd-ports-bugs@freebsd.org Content-Type: multipart/mixed; boundary="------------050502040100050208010609" X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: [bug] Driver for the Lucent LT Winmodem chipset (comms/ltmdm) X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Aug 2006 20:29:55 -0000 This is a multi-part message in MIME format. --------------050502040100050208010609 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit -------- Original Message -------- Subject: [bug] Driver for the Lucent LT Winmodem chipset Date: Sun, 30 Jul 2006 10:09:51 +0200 From: Ivan Radovanovic To: osa@FreeBSD.org I have recently found bug in ltmdm driver. Driver crashes whole system every time when phone call is received while driver is in memory. Problem is in ltmdmsio.c file, trying to read NULL pointer. I fixed this problem, in attachment are two diff files: - patch-sys-dev-ltmdm-ltmdmsio.c - patch file from directory files in ltmdm port directory. I have changed this file to include check not to read memory from NULL pointer - ltmdmsio.c.diff - diff after applying change between original ltmdmsio.c file, and ltmdmsio.c file I have changed Best regards, Ivan P.S. I am using FreeBSD 6.1, problem also existed in FreeBSD 5.x --------------050502040100050208010609 Content-Type: text/x-patch; name="ltmdmsio.c.diff" Content-Transfer-Encoding: 7bit Content-Disposition: inline; filename="ltmdmsio.c.diff" 2089c2089 < if (com->tp != 0 && com->tp->t_hotchar != 0 && recv_data == com->tp->t_hotchar) --- > if (com->tp->t_hotchar != 0 && recv_data == com->tp->t_hotchar) --------------050502040100050208010609--