| commit | 54706d99051582993037be5a076aa543fd7f1c38 | [log] [tgz] |
|---|---|---|
| author | roel kluin <roel.kluin@gmail.com> | Sat Aug 01 20:20:13 2009 +0000 |
| committer | David S. Miller <davem@davemloft.net> | Sun Aug 02 12:20:40 2009 -0700 |
| tree | 74462b9fc52835114b8e28b72829dabc1e92342e | |
| parent | 1b994b5a1b3cb5395598a08ef3bb0ac118d75c1b [diff] |
s6gmac: Read buffer overflow Check whether index is within bounds before testing the element. In the last iteration i is PHY_MAX_ADDR. the condition `!(p = pd->mii.bus->phy_map[PHY_MAX_ADDR])' is undefined and may evaluate to false, which leads to a dereference of this invalid phy_map in the phy_connect() below. Signed-off-by: Roel Kluin <roel.kluin@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net>