2008-02-27 21:25:08

by Adrian Bunk

[permalink] [raw]
Subject: [2.6 patch] i2c-amd756.c: fix off-by-one

This patch fixes an off-by-one error spotted by the Coverity checker.

Signed-off-by: Adrian Bunk <[email protected]>

---
f9829dd0d7dad9cbc08da3fceb105478e85c4137 foobar
diff --git a/drivers/i2c/busses/i2c-amd756.c b/drivers/i2c/busses/i2c-amd756.c
index 573abe4..2fa4318 100644
--- a/drivers/i2c/busses/i2c-amd756.c
+++ b/drivers/i2c/busses/i2c-amd756.c
@@ -335,7 +335,7 @@ static int __devinit amd756_probe(struct pci_dev *pdev,
u8 temp;

/* driver_data might come from user-space, so check it */
- if (id->driver_data > ARRAY_SIZE(chipname))
+ if (id->driver_data >= ARRAY_SIZE(chipname))
return -EINVAL;

if (amd756_ioport) {


2008-02-28 20:05:59

by Jean Delvare

[permalink] [raw]
Subject: Re: [2.6 patch] i2c-amd756.c: fix off-by-one

Hi Adrian,

On Wed, 27 Feb 2008 23:21:09 +0200, Adrian Bunk wrote:
> This patch fixes an off-by-one error spotted by the Coverity checker.
>
> Signed-off-by: Adrian Bunk <[email protected]>
>
> ---
> f9829dd0d7dad9cbc08da3fceb105478e85c4137 foobar
> diff --git a/drivers/i2c/busses/i2c-amd756.c b/drivers/i2c/busses/i2c-amd756.c
> index 573abe4..2fa4318 100644
> --- a/drivers/i2c/busses/i2c-amd756.c
> +++ b/drivers/i2c/busses/i2c-amd756.c
> @@ -335,7 +335,7 @@ static int __devinit amd756_probe(struct pci_dev *pdev,
> u8 temp;
>
> /* driver_data might come from user-space, so check it */
> - if (id->driver_data > ARRAY_SIZE(chipname))
> + if (id->driver_data >= ARRAY_SIZE(chipname))
> return -EINVAL;
>
> if (amd756_ioport) {
>

Good catch, not sure how I managed to mess it up that way. Patch
applied, thank you.

--
Jean Delvare