evie/android_kernel_oneplus_msm8998
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

dma: cppi41: off by one in desc_to_chan()

Browse source 
The test here should be ">=" instead of ">".  The cdd->chan_busy[] array
has "ALLOC_DECS_NUM" elements.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Vinod Koul <vinod.koul@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
This commit is contained in:
Dan Carpenter 2013-08-28 13:48:44 +03:00 • committed by Greg Kroah-Hartman
parent ff49896aa4
commit 2d17f7fb69
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
drivers/dma/cppi41.c
View file

@ -242,7 +242,7 @@ static struct cppi41_channel *desc_to_chan(struct cppi41_dd *cdd, u32 desc)
} }
desc_num = (desc - cdd->descs_phys) / sizeof(struct cppi41_desc); desc_num = (desc - cdd->descs_phys) / sizeof(struct cppi41_desc);
BUG_ON(desc_num > ALLOC_DECS_NUM); BUG_ON(desc_num >= ALLOC_DECS_NUM);
c = cdd->chan_busy[desc_num]; c = cdd->chan_busy[desc_num];
cdd->chan_busy[desc_num] = NULL; cdd->chan_busy[desc_num] = NULL;
return c; return c;