| commit | 16c59419a09f0140a07a1828d6a45656265e07c7 | [log] [tgz] |
|---|---|---|
| author | Ralph Campbell <ralphc@pathscale.com> | Mon Jul 17 18:21:24 2006 -0700 |
| committer | Roland Dreier <rolandd@cisco.com> | Mon Jul 24 09:18:07 2006 -0700 |
| tree | 561234eaf2a32f143566f62ef660f1cac2b68ebf | |
| parent | c9f79bdc21da9c8d466b6ba7c8bbd6b8e0110ce2 [diff] |
IB/ipath: ipath_skip_sge() can break if num_sge > 1 ipath_skip_sge() doesn't exactly duplicate the side effects of ipath_copy_sge() if num_sge > 1 since it doesn't decrement ss->num_sge. This could result in the sg_list being accessed out of bounds. Since ipath_skip_sge() is almost always called with num_sge == 1, the original "optimization" is almost never used. Signed-off-by: Ralph Campbell <ralph.campbell@qlogic.com> Signed-off-by: Roland Dreier <rolandd@cisco.com>