Commit 269c0ee6 authored Jul 31, 2009 by Roel Kluin Committed by David Woodhouse Sep 04, 2009

slram: Read buffer overflow



map[count] is checked before count < SLRAM_MAX_DEVICES_PARAMS

Signed-off-by: Roel Kluin <roel.kluin@gmail.com>
Signed-off-by: Artem Bityutskiy <Artem.Bityutskiy@nokia.com>
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>

parent ad4fbc79

drivers/mtd/devices/slram.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -341,7 +341,7 @@ static int init_slram(void)
		#else
		int count;

		for (count = 0; (map[count]) && (count < SLRAM_MAX_DEVICES_PARAMS);
		for (count = 0; count < SLRAM_MAX_DEVICES_PARAMS && map[count];
		count++) {
		}