| commit | 8dd07086a1f8048428d33a1917b6209978750cb1 | [log] [tgz] |
|---|---|---|
| author | roel kluin <roel.kluin@gmail.com> | Mon Aug 10 01:29:52 2009 +0000 |
| committer | David S. Miller <davem@davemloft.net> | Thu Aug 13 16:26:10 2009 -0700 |
| tree | 2f6ba6838459114c802302a89d049ee2ef7a2458 | |
| parent | a6fa32866567351503db8a5c3466a676ba08595f [diff] |
lmc: Read outside array bounds If dev_alloc_skb() fails on the first iteration of the allocation loop, then we end up writing before the start of the array. Signed-off-by: Roel Kluin <roel.kluin@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net>