提交 9f13fae2 编写于 作者: E Eric Sesterhenn 提交者: Linus Torvalds

[PATCH] Fix typo in drivers/isdn/hisax/q931.c

This fixes coverity bug #517.

Since IESIZE is greater than IESIZE_NI1 we might run past the end of
ielist_ni1.  This fixes it by using the proper IESIZE_NI1 define.
Signed-off-by: NEric Sesterhenn <snakebyte@gmx.de>
Acked-by: NKarsten Keil <kkeil@suse.de>
Signed-off-by: NAndrew Morton <akpm@osdl.org>
Signed-off-by: NLinus Torvalds <torvalds@osdl.org>
上级 6aa65472
...@@ -1402,12 +1402,12 @@ dlogframe(struct IsdnCardState *cs, struct sk_buff *skb, int dir) ...@@ -1402,12 +1402,12 @@ dlogframe(struct IsdnCardState *cs, struct sk_buff *skb, int dir)
} }
/* No, locate it in the table */ /* No, locate it in the table */
if (cset == 0) { if (cset == 0) {
for (i = 0; i < IESIZE; i++) for (i = 0; i < IESIZE_NI1; i++)
if (*buf == ielist_ni1[i].nr) if (*buf == ielist_ni1[i].nr)
break; break;
/* When not found, give appropriate msg */ /* When not found, give appropriate msg */
if (i != IESIZE) { if (i != IESIZE_NI1) {
dp += sprintf(dp, " %s\n", ielist_ni1[i].descr); dp += sprintf(dp, " %s\n", ielist_ni1[i].descr);
dp += ielist_ni1[i].f(dp, buf); dp += ielist_ni1[i].f(dp, buf);
} else } else
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册