Commit 2d17f7fb authored Aug 28, 2013 by Dan Carpenter Committed by Greg Kroah-Hartman Aug 28, 2013

dma: cppi41: off by one in desc_to_chan()



The test here should be ">=" instead of ">".  The cdd->chan_busy[] array
has "ALLOC_DECS_NUM" elements.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Vinod Koul <vinod.koul@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

parent ff49896a

drivers/dma/cppi41.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -242,7 +242,7 @@ static struct cppi41_channel desc_to_chan(struct cppi41_dd cdd, u32 desc)
		}

		desc_num = (desc - cdd->descs_phys) / sizeof(struct cppi41_desc);
		BUG_ON(desc_num > ALLOC_DECS_NUM);
		BUG_ON(desc_num >= ALLOC_DECS_NUM);
		c = cdd->chan_busy[desc_num];
		cdd->chan_busy[desc_num] = NULL;
		return c;

Admin message