diff options
| author | Dan Carpenter <dan.carpenter@oracle.com> | 2018-01-25 17:13:40 +0300 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2018-05-25 17:17:47 +0300 |
| commit | 0bf213d90bb2c25d1f36811d14f239126764b130 (patch) | |
| tree | 75a3f2c57fee2aee992a6eab13ec7d31242e2187 /drivers/message | |
| parent | a1ac3da8431afd57a3d08e24b8eb460e6255bf99 (diff) | |
| download | linux-0bf213d90bb2c25d1f36811d14f239126764b130.tar.xz | |
scsi: sym53c8xx_2: iterator underflow in sym_getsync()
[ Upstream commit e6f791d95313c85f3dd4a26141e28e50ae9aa0ae ]
We wanted to exit the loop with "div" set to zero, but instead, if we
don't hit the break then "div" is -1 when we finish the loop. It leads
to an array underflow a few lines later.
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Johannes Thumshirn <jthumshirn@suse.de>
Acked-by: Matthew Wilcox <mawilcox@microsoft.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Sasha Levin <alexander.levin@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/message')
0 files changed, 0 insertions, 0 deletions