From: Denis Kirjanov Date: Tue, 1 Jun 2010 19:43:34 +0000 (-0400) Subject: powerpc/oprofile: fix potential buffer overrun in op_model_cell.c X-Git-Tag: v2.6.35-rc3~13^2~1^2 X-Git-Url: http://bbs.cooldavid.org/git/?a=commitdiff_plain;h=238c1a78c957f3dc7cb848b161dcf4805793ed56;p=net-next-2.6.git powerpc/oprofile: fix potential buffer overrun in op_model_cell.c Fix potential initial_lfsr buffer overrun. Writing past the end of the buffer could happen when index == ENTRIES Signed-off-by: Denis Kirjanov Cc: stable@kernel.org Signed-off-by: Robert Richter --- diff --git a/arch/powerpc/oprofile/op_model_cell.c b/arch/powerpc/oprofile/op_model_cell.c index 2c9e5226729..7fd90d02d8c 100644 --- a/arch/powerpc/oprofile/op_model_cell.c +++ b/arch/powerpc/oprofile/op_model_cell.c @@ -1077,7 +1077,7 @@ static int calculate_lfsr(int n) index = ENTRIES-1; /* make sure index is valid */ - if ((index > ENTRIES) || (index < 0)) + if ((index >= ENTRIES) || (index < 0)) index = ENTRIES-1; return initial_lfsr[index];