Commit c57ddfae authored Apr 20, 2015 by Dan Carpenter Committed by Marcel Holtmann Apr 30, 2015

Bluetooth: btusb: off by one in rtl8723b_parse_firmware()

The ">" should be ">=" so that we don't read past the end of the array.

Fixes: 9d9a113e3695 ('Bluetooth: btusb: Add Realtek 8723A/8723B/8761A/8821A support')
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Daniel Drake <drake@endlessm.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>

parent eb50042f

drivers/bluetooth/btusb.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -1502,7 +1502,7 @@ static int rtl8723b_parse_firmware(struct hci_dev *hdev, u16 lmp_subver,
		return -EINVAL;
		}

		if (project_id > ARRAY_SIZE(project_id_to_lmp_subver)) {
		if (project_id >= ARRAY_SIZE(project_id_to_lmp_subver)) {
		BT_ERR("%s: unknown project id %d", hdev->name, project_id);
		return -EINVAL;
		}