From 2d17f7fb693bfb197d1e7007f2060deba78ae675 Mon Sep 17 00:00:00 2001 From: Dan Carpenter Date: Wed, 28 Aug 2013 13:48:44 +0300 Subject: dma: cppi41: off by one in desc_to_chan() The test here should be ">=" instead of ">". The cdd->chan_busy[] array has "ALLOC_DECS_NUM" elements. Signed-off-by: Dan Carpenter Acked-by: Vinod Koul Signed-off-by: Greg Kroah-Hartman --- drivers/dma/cppi41.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'drivers/dma/cppi41.c') diff --git a/drivers/dma/cppi41.c b/drivers/dma/cppi41.c index 6c4e64f2f3e7..7c82b92f9b16 100644 --- a/drivers/dma/cppi41.c +++ b/drivers/dma/cppi41.c @@ -242,7 +242,7 @@ static struct cppi41_channel *desc_to_chan(struct cppi41_dd *cdd, u32 desc) } desc_num = (desc - cdd->descs_phys) / sizeof(struct cppi41_desc); - BUG_ON(desc_num > ALLOC_DECS_NUM); + BUG_ON(desc_num >= ALLOC_DECS_NUM); c = cdd->chan_busy[desc_num]; cdd->chan_busy[desc_num] = NULL; return c; -- cgit v1.2.3