Off by one in floppy.c
Another coverity patch i forgot to resend, original thread here http://marc.info/?l=linux-kernel&m=115144559823592&w=2 In case drive == N_DRIVE, we get one past the drive_params array. Signed-off-by: Eric Sesterhenn <snakebyte@gmx.de> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
This commit is contained in:
Родитель
fa74419bb7
Коммит
4acb3e2f97
|
@ -670,7 +670,7 @@ static void __reschedule_timeout(int drive, const char *message, int marg)
|
|||
if (drive == current_reqD)
|
||||
drive = current_drive;
|
||||
del_timer(&fd_timeout);
|
||||
if (drive < 0 || drive > N_DRIVE) {
|
||||
if (drive < 0 || drive >= N_DRIVE) {
|
||||
fd_timeout.expires = jiffies + 20UL * HZ;
|
||||
drive = 0;
|
||||
} else
|
||||
|
|
Загрузка…
Ссылка в новой задаче