Overrun in drivers/char/rio/riocmd.c
authorEric Sesterhenn / Snakebyte <snakebyte@gmx.de>
Fri, 11 May 2007 05:22:48 +0000 (22:22 -0700)
committerLinus Torvalds <torvalds@woody.linux-foundation.org>
Fri, 11 May 2007 15:29:34 +0000 (08:29 -0700)
commit84ea77635b91a6ca1c0c592ee5ddc0c780856b97
tree72df964edd4083e8c5c6bd180792293b2d4edaa5
parenta12bb44471b819c7f33d8a83044e7116c124e3d5
Overrun in drivers/char/rio/riocmd.c

This got somehow lost in the noise.  This fixes coverity bug id #1025, if
Rup is greater or equal to MAX_RUP, we run past the Mapping Array.

Signed-off-by: Eric Sesterhenn <snakebyte@gmx.de>
Cc: Jiri Slaby <jirislaby@gmail.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
drivers/char/rio/riocmd.c