diff options
| author | Zaur Kambarov <kambarov@berkeley.edu> | 2005-06-21 17:14:31 -0700 |
|---|---|---|
| committer | Linus Torvalds <torvalds@ppc970.osdl.org> | 2005-06-21 18:46:12 -0700 |
| commit | 589777eab7360894b7ca1c4ba9d252e03b51225b (patch) | |
| tree | d32b8dadc4dc52e81d2b9ffbd03d100b168b41fa /lib/idr.c | |
| parent | 3a845099b20e81fb678521f034bbdcd69208da4e (diff) | |
| download | op-kernel-dev-589777eab7360894b7ca1c4ba9d252e03b51225b.zip op-kernel-dev-589777eab7360894b7ca1c4ba9d252e03b51225b.tar.gz | |
[PATCH] coverity: idr_get_new_above_int() overrun fix
This patch fixes overrun of array pa:
92 struct idr_layer *pa[MAX_LEVEL];
in
98 l = idp->layers;
99 pa[l--] = NULL;
by passing idp->layers, set in
202 idp->layers = layers;
to function sub_alloc in
203 v = sub_alloc(idp, ptr, &id);
Signed-off-by: Zaur Kambarov <zkambarov@coverity.com>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
Diffstat (limited to 'lib/idr.c')
| -rw-r--r-- | lib/idr.c | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -175,7 +175,7 @@ build_up: * Add a new layer to the top of the tree if the requested * id is larger than the currently allocated space. */ - while ((layers < MAX_LEVEL) && (id >= (1 << (layers*IDR_BITS)))) { + while ((layers < (MAX_LEVEL - 1)) && (id >= (1 << (layers*IDR_BITS)))) { layers++; if (!p->count) continue; |
