diff options
| author | Roel Kluin <roel.kluin@gmail.com> | 2009-06-12 10:26:34 +0200 |
|---|---|---|
| committer | Martin Schwidefsky <schwidefsky@de.ibm.com> | 2009-06-12 10:27:34 +0200 |
| commit | 6b9d8e80bb9edd0c9fe948a6ef105391de56b012 (patch) | |
| tree | c4e29fc6485070f22650d3ebc7bf2133696b79a4 /drivers | |
| parent | 239a64255fae8933d95273b5b92545949ca4e743 (diff) | |
| download | op-kernel-dev-6b9d8e80bb9edd0c9fe948a6ef105391de56b012.zip op-kernel-dev-6b9d8e80bb9edd0c9fe948a6ef105391de56b012.tar.gz | |
[S390] qdio: fix access beyond ARRAY_SIZE of irq_ptr->{in,out}put_qs
Do not go beyond ARRAY_SIZE of irq_ptr->{in,out}put_qs
Signed-off-by: Roel Kluin <roel.kluin@gmail.com>
Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
Diffstat (limited to 'drivers')
| -rw-r--r-- | drivers/s390/cio/qdio_main.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/s390/cio/qdio_main.c b/drivers/s390/cio/qdio_main.c index ba4facc..d79cf5b 100644 --- a/drivers/s390/cio/qdio_main.c +++ b/drivers/s390/cio/qdio_main.c @@ -1494,7 +1494,7 @@ int do_QDIO(struct ccw_device *cdev, unsigned int callflags, if ((bufnr > QDIO_MAX_BUFFERS_PER_Q) || (count > QDIO_MAX_BUFFERS_PER_Q) || - (q_nr > QDIO_MAX_QUEUES_PER_IRQ)) + (q_nr >= QDIO_MAX_QUEUES_PER_IRQ)) return -EINVAL; if (!count) |
