From mboxrd@z Thu Jan 1 00:00:00 1970 From: David Miller Subject: Re: [PATCH] mlx4_en: Fix out of bounds array access Date: Mon, 25 Oct 2010 12:16:01 -0700 (PDT) Message-ID: <20101025.121601.48518820.davem@davemloft.net> References: <20101025125647.GA7710@mtldesk30> Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Cc: yevgenyp-VPRAkNaXOzVS1MOuV/RT9w@public.gmane.org, rdreier-FYB4Gu1CFyUAvxtiuMwx3w@public.gmane.org, linux-rdma-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, netdev-u79uwXL29TY76Z2rM5mHXA@public.gmane.org To: eli-LDSdmyG8hGV8YrgS2mwiifqBs+8SCbDb@public.gmane.org Return-path: In-Reply-To: <20101025125647.GA7710@mtldesk30> Sender: linux-rdma-owner-u79uwXL29TY76Z2rM5mHXA@public.gmane.org List-Id: netdev.vger.kernel.org From: Eli Cohen Date: Mon, 25 Oct 2010 14:56:47 +0200 > When searching for a free entry in either mlx4_register_vlan() or > mlx4_register_mac(), and there is no free entry, the loop terminates without > updating the local variable free thus causing out of array bounds access. Fix > this by adding a proper check outside the loop. > > Signed-off-by: Eli Cohen Applied. -- To unsubscribe from this list: send the line "unsubscribe linux-rdma" in the body of a message to majordomo-u79uwXL29TY76Z2rM5mHXA@public.gmane.org More majordomo info at http://vger.kernel.org/majordomo-info.html