gigaset: beyond ARRAY_SIZE of iwb->data
authorRoel Kluin <roel.kluin@gmail.com>
Thu, 21 May 2009 22:04:15 +0000 (15:04 -0700)
committerDavid S. Miller <davem@davemloft.net>
Thu, 21 May 2009 22:04:15 +0000 (15:04 -0700)
Signed-off-by: Roel Kluin <roel.kluin@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
drivers/isdn/gigaset/isocdata.c

index b171e75cb52e51f920125abc984648f22415e961..29808c4fb1cb658ddc9c91f9187ef4cadb39afa4 100644 (file)
@@ -175,7 +175,7 @@ int gigaset_isowbuf_getbytes(struct isowbuf_t *iwb, int size)
                return -EINVAL;
        }
        src = iwb->read;
-       if (unlikely(limit > BAS_OUTBUFSIZE + BAS_OUTBUFPAD ||
+       if (unlikely(limit >= BAS_OUTBUFSIZE + BAS_OUTBUFPAD ||
                     (read < src && limit >= src))) {
                pr_err("isoc write buffer frame reservation violated\n");
                return -EFAULT;