Commit e8e6c875 authored by Dan Carpenter's avatar Dan Carpenter Committed by Brian Norris

mtd: intflmount: fix off by one error in INFTL_dumpVUchains()

The ->PUtable[] array has "->nb_blocks" number of elemetns so this
comparison should be ">=" instead of ">".  Otherwise it could result in
a minor read beyond the end of an array.
Signed-off-by: default avatarDan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: default avatarBrian Norris <computersforpeace@gmail.com>
parent f02985b7
...@@ -518,7 +518,7 @@ void INFTL_dumpVUchains(struct INFTLrecord *s) ...@@ -518,7 +518,7 @@ void INFTL_dumpVUchains(struct INFTLrecord *s)
pr_debug("INFTL Virtual Unit Chains:\n"); pr_debug("INFTL Virtual Unit Chains:\n");
for (logical = 0; logical < s->nb_blocks; logical++) { for (logical = 0; logical < s->nb_blocks; logical++) {
block = s->VUtable[logical]; block = s->VUtable[logical];
if (block > s->nb_blocks) if (block >= s->nb_blocks)
continue; continue;
pr_debug(" LOGICAL %d --> %d ", logical, block); pr_debug(" LOGICAL %d --> %d ", logical, block);
for (i = 0; i < s->nb_blocks; i++) { for (i = 0; i < s->nb_blocks; i++) {
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment