--- linux-2.6.5/drivers/media/video/zoran_procfs.c-old 2004-04-07 20:41:59.000000000 +0200 +++ linux-2.6.5/drivers/media/video/zoran_procfs.c 2004-04-07 20:42:08.000000000 +0200 @@ -204,6 +204,10 @@ char *line, *ldelim, *varname, *svar, *tdelim; struct zoran *zr; + /* Random maximum */ + if (count > 256) + return -EINVAL; + zr = (struct zoran *) data; string = sp = vmalloc(count + 1);