]> git.kernelconcepts.de Git - karo-tx-linux.git/commitdiff
skd: Fix out of array boundary access
authorAlexander Gordeev <agordeev@redhat.com>
Wed, 19 Feb 2014 08:58:18 +0000 (09:58 +0100)
committerJens Axboe <axboe@fb.com>
Fri, 21 Feb 2014 23:45:26 +0000 (15:45 -0800)
When enabling MSI-X, interrupts are requested for SKD_MAX_MSIX_COUNT
entries in skdev->msix_entries array, while the number of actually
allocated entries is skdev->msix_count. This might lead to an out of
boundary access in case number of allocated entries is less than
SKD_MAX_MSIX_COUNT. This update fixes the described misbehaviour.

Signed-off-by: Alexander Gordeev <agordeev@redhat.com>
Cc: Jens Axboe <axboe@kernel.dk>
Cc: Bartlomiej Zolnierkiewicz <b.zolnierkie@samsung.com>
Cc: Kyungmin Park <kyungmin.park@samsung.com>
Cc: linux-pci@vger.kernel.org
Signed-off-by: Jens Axboe <axboe@fb.com>
drivers/block/skd_main.c

index eb6e1e0e8db25f78f2d2407e0d54dafc2a2b9583..3fa0918ddaf8e77f8aa43f691112b0145dafb719 100644 (file)
@@ -3989,7 +3989,7 @@ static int skd_acquire_msix(struct skd_device *skdev)
        }
 
        /* Enable MSI-X vectors for the base queue */
-       for (i = 0; i < SKD_MAX_MSIX_COUNT; i++) {
+       for (i = 0; i < skdev->msix_count; i++) {
                qentry = &skdev->msix_entries[i];
                snprintf(qentry->isr_name, sizeof(qentry->isr_name),
                         "%s%d-msix %s", DRV_NAME, skdev->devno,