aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorRoel Kluin <roel.kluin@gmail.com>2009-05-21 15:04:15 -0700
committerDavid S. Miller <davem@davemloft.net>2009-05-21 15:04:15 -0700
commitc40499e04b2005e61f989824251f9343b55f96bb (patch)
treefa04ce6496cbc8bf24c3acdad6af6a4ef0e9a24b
parent4f72427998b105392e60bae7a6798a0c96fe4f0a (diff)
downloadmrst-s0i3-test-c40499e04b2005e61f989824251f9343b55f96bb.tar.gz
mrst-s0i3-test-c40499e04b2005e61f989824251f9343b55f96bb.tar.xz
mrst-s0i3-test-c40499e04b2005e61f989824251f9343b55f96bb.zip
gigaset: beyond ARRAY_SIZE of iwb->data
Signed-off-by: Roel Kluin <roel.kluin@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net>
-rw-r--r--drivers/isdn/gigaset/isocdata.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/isdn/gigaset/isocdata.c b/drivers/isdn/gigaset/isocdata.c
index b171e75cb52..29808c4fb1c 100644
--- a/drivers/isdn/gigaset/isocdata.c
+++ b/drivers/isdn/gigaset/isocdata.c
@@ -175,7 +175,7 @@ int gigaset_isowbuf_getbytes(struct isowbuf_t *iwb, int size)
return -EINVAL;
}
src = iwb->read;
- if (unlikely(limit > BAS_OUTBUFSIZE + BAS_OUTBUFPAD ||
+ if (unlikely(limit >= BAS_OUTBUFSIZE + BAS_OUTBUFPAD ||
(read < src && limit >= src))) {
pr_err("isoc write buffer frame reservation violated\n");
return -EFAULT;