Dan Carpenter f2633d2eaa atm: iphase: off by one in rx_pkt()
The iadev->rx_open[] array holds "iadev->num_vc" pointers (this code
assumes that pointers are 32 bits).  So the > here should be >= or else
we could end up reading a garbage pointer from one element beyond the
end of the array.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2016-05-31 11:52:59 -07:00
..
2015-01-18 00:28:41 -05:00
2011-03-31 11:26:23 -03:00
2015-01-18 00:28:41 -05:00
2015-06-10 22:46:34 -07:00
2005-04-16 15:20:36 -07:00
2011-03-31 11:26:23 -03:00
2016-05-31 11:52:59 -07:00
2013-02-08 14:22:05 -05:00
2015-01-18 00:28:41 -05:00
2005-04-16 15:20:36 -07:00
2015-12-29 15:32:24 -05:00
2012-03-28 18:30:03 +01:00
2005-04-16 15:20:36 -07:00
2005-04-16 15:20:36 -07:00
2011-07-26 16:49:47 -07:00
2005-04-16 15:20:36 -07:00
2015-01-18 00:28:41 -05:00
2005-04-16 15:20:36 -07:00