redonkable
/
alistair23-linux
1
0
Fork 0
Code Releases Activity

scsi: sym53c8xx_2: iterator underflow in sym_getsync() 

We wanted to exit the loop with "div" set to zero, but instead, if we
don't hit the break then "div" is -1 when we finish the loop.  It leads
to an array underflow a few lines later.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Johannes Thumshirn <jthumshirn@suse.de>
Acked-by: Matthew Wilcox <mawilcox@microsoft.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
hifive-unleashed-5.1
Dan Carpenter 2018-01-25 17:13:40 +03:00 committed by Martin K. Petersen
parent ecf7ff4994
commit e6f791d953
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
drivers/scsi/sym53c8xx_2/sym_hipd.c
View File

@ -536,7 +536,7 @@ sym_getsync(struct sym_hcb *np, u_char dt, u_char sfac, u_char *divp, u_char *fa
* Look for the greatest clock divisor that allows an
* input speed faster than the period.
*/
while (div-- > 0)
while (--div > 0)
if (kpc >= (div_10M[div] << 2)) break;
/*