diff options
| author | Dan Carpenter <dan.carpenter@oracle.com> | 2016-05-27 12:34:35 +0200 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2016-05-31 20:52:59 +0200 |
| commit | f2633d2eaaab773ea8b29cea3785cf0f8a8872a5 (patch) | |
| tree | 7e7a7e03f72c394181ba4feb1ad4752fc78ecef9 /net | |
| parent | atm: firestream: add more reserved strings (diff) | |
| download | linux-f2633d2eaaab773ea8b29cea3785cf0f8a8872a5.tar.xz linux-f2633d2eaaab773ea8b29cea3785cf0f8a8872a5.zip | |
atm: iphase: off by one in rx_pkt()
The iadev->rx_open[] array holds "iadev->num_vc" pointers (this code
assumes that pointers are 32 bits). So the > here should be >= or else
we could end up reading a garbage pointer from one element beyond the
end of the array.
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net')
0 files changed, 0 insertions, 0 deletions