[PATCH] slram: Read buffer overflow
Roel Kluin
roel.kluin at gmail.com
Fri Jul 31 08:47:58 EDT 2009
map[count] is checked before count < SLRAM_MAX_DEVICES_PARAMS
Signed-off-by: Roel Kluin <roel.kluin at gmail.com>
---
declared on drivers/mtd/devices/slram.c:66:
static char *map[SLRAM_MAX_DEVICES_PARAMS];
diff --git a/drivers/mtd/devices/slram.c b/drivers/mtd/devices/slram.c
index 00248e8..239500b 100644
--- a/drivers/mtd/devices/slram.c
+++ b/drivers/mtd/devices/slram.c
@@ -341,7 +341,7 @@ static int init_slram(void)
#else
int count;
- for (count = 0; (map[count]) && (count < SLRAM_MAX_DEVICES_PARAMS);
+ for (count = 0; count < SLRAM_MAX_DEVICES_PARAMS && map[count];
count++) {
}
More information about the linux-mtd
mailing list