From 68fab2508087e21af8f980acb74995c49794a872 Mon Sep 17 00:00:00 2001
From: kib <kib@FreeBSD.org>
Date: Tue, 6 May 2014 12:20:07 +0000
Subject: MFC r265100: Fix the comparision for the end of range in
 vm_phys_fictitious_reg_range().

---
 sys/vm/vm_phys.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to 'sys/vm')

diff --git a/sys/vm/vm_phys.c b/sys/vm/vm_phys.c
index a79a5f6..b354a8d 100644
--- a/sys/vm/vm_phys.c
+++ b/sys/vm/vm_phys.c
@@ -552,7 +552,9 @@ vm_phys_fictitious_reg_range(vm_paddr_t start, vm_paddr_t end,
 
 #ifdef VM_PHYSSEG_DENSE
 	pi = atop(start);
-	if (pi >= first_page && atop(end) < vm_page_array_size) {
+	if (pi >= first_page && pi < vm_page_array_size + first_page) {
+		if (atop(end) >= vm_page_array_size + first_page)
+			return (EINVAL);
 		fp = &vm_page_array[pi - first_page];
 		malloced = FALSE;
 	} else
-- 
cgit v1.1