Ticket #5859: dvbci.patch

mythtv/libs/libmythtv/dvbdev/dvbci.cpp

@@ -1924 +1924 @@
     state = 2;
 
     msg.msg[3] = CaPmt.length;
+
+    if (CaPmt.length > 256) {
+        fprintf(stderr, "CA_PMT too large; max length = 256");
+   
+        fprintf(stderr, "Message was [%02x %02x %02x ]\n",
+                       msg.msg[0], msg.msg[1], msg.msg[2]);
+
+        return false;
+    }
+
     memcpy(&msg.msg[4], CaPmt.capmt, CaPmt.length);
 
     if ((SendData(AOT_CA_PMT, &msg)) < 0) {