Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit b57578b3 authored by Ameen Ali's avatar Ameen Ali Committed by David S. Miller
Browse files

tulip_core.c : out-of-bounds check. 



Array index 'j' is used before limits check.

Suggest put limit check before index use.

Signed-off-by : <Ameenali023@gmail.com>

Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent ab3971b1

drivers/net/ethernet/dec/tulip/tulip_core.c

+1 −1
Original line number Diff line number Diff line
@@ -589,7 +589,7 @@ static void tulip_tx_timeout(struct net_device *dev) 
			       (unsigned int)tp->rx_ring[i].buffer1,

			       (unsigned int)tp->rx_ring[i].buffer2,

			       buf[0], buf[1], buf[2]);

			for (j = 0; buf[j] != 0xee && j < 1600; j++)

			for (j = 0; ((j < 1600) && buf[j] != 0xee); j++)

				if (j < 100)

					pr_cont(" %02x", buf[j]);

			pr_cont(" j=%d\n", j);