| commit | 03cd7136d68b4877a9e1793d31cab38fdcb67434 | [log] [tgz] |
|---|---|---|
| author | Roel Kluin <roel.kluin@gmail.com> | Sat Aug 08 00:35:31 2009 +0200 |
| committer | Greg Kroah-Hartman <gregkh@suse.de> | Tue Sep 15 12:02:09 2009 -0700 |
| tree | db3e47648bd9ef6492d47e0630ccc639827905b2 | |
| parent | 256a816b6b78bf29fba0c0f1bbcf998953429422 [diff] |
Staging: vt6655: fix possible Read buffer overflow
If pDevice->sOpts.nRxDescs{0,1} or nTxDescs[{0,1}] is zero, the loop ends with
i == 0, and we write aRD{0,1}Ring[-1]. apTD{0,1}Rings[-1] respectively.
Signed-off-by: Roel Kluin <roel.kluin@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>