diff options
| author | Roel Kluin <roel.kluin@gmail.com> | 2009-05-21 15:04:15 -0700 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2009-05-21 15:04:15 -0700 |
| commit | c40499e04b2005e61f989824251f9343b55f96bb (patch) | |
| tree | fa04ce6496cbc8bf24c3acdad6af6a4ef0e9a24b | |
| parent | 4f72427998b105392e60bae7a6798a0c96fe4f0a (diff) | |
| download | op-kernel-dev-c40499e04b2005e61f989824251f9343b55f96bb.zip op-kernel-dev-c40499e04b2005e61f989824251f9343b55f96bb.tar.gz | |
gigaset: beyond ARRAY_SIZE of iwb->data
Signed-off-by: Roel Kluin <roel.kluin@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
| -rw-r--r-- | drivers/isdn/gigaset/isocdata.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/isdn/gigaset/isocdata.c b/drivers/isdn/gigaset/isocdata.c index b171e75..29808c4 100644 --- a/drivers/isdn/gigaset/isocdata.c +++ b/drivers/isdn/gigaset/isocdata.c @@ -175,7 +175,7 @@ int gigaset_isowbuf_getbytes(struct isowbuf_t *iwb, int size) return -EINVAL; } src = iwb->read; - if (unlikely(limit > BAS_OUTBUFSIZE + BAS_OUTBUFPAD || + if (unlikely(limit >= BAS_OUTBUFSIZE + BAS_OUTBUFPAD || (read < src && limit >= src))) { pr_err("isoc write buffer frame reservation violated\n"); return -EFAULT; |
