Commit 3d4656d6 authored Jul 31, 2009 by Roel Kluin Committed by Ralf Baechle Aug 03, 2009

MIPS: Jazz: Fix read buffer overflow



Check whether index is within bounds before testing the element.

Signed-off-by: Roel Kluin <roel.kluin@gmail.com>
Signed-off-by: Ralf Baechle <ralf@linux-mips.org>

parent 64f18155

arch/mips/jazz/jazzdma.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -190,7 +190,7 @@ int vdma_free(unsigned long laddr)
		return -1;
		}

		while (pgtbl[i].owner == laddr && i < VDMA_PGTBL_ENTRIES) {
		while (i < VDMA_PGTBL_ENTRIES && pgtbl[i].owner == laddr) {
		pgtbl[i].owner = VDMA_PAGE_EMPTY;
		i++;
		}