Commit 2cc0bab8 authored Sep 18, 2009 by Roel Kluin Committed by Russell King Sep 19, 2009

ARM: STMP3xxx: deallocation with negative index of descriptors[]



The last deallocation is invalid. In the last iteration, i is -1.

Signed-off-by: Roel Kluin <roel.kluin@gmail.com>
Acked-by: dmitry pervushin <dpervushin@embeddedalley.com>
Cc: Russell King <rmk@arm.linux.org.uk>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>

parent ba978365

arch/arm/plat-stmp3xxx/dma.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -264,7 +264,7 @@ int stmp3xxx_dma_make_chain(int ch, struct stmp37xx_circ_dma_chain *chain,
		stmp3xxx_dma_free_command(ch,
		&descriptors
		[i]);
		} while (i-- >= 0);
		} while (i-- > 0);
		}
		return err;
		}