Commit 493f139ecf9ee72f73ccbabd016325a145e884ee

Authored by Roel Kluin
Committed by Linus Torvalds
1 parent 34308fd4a2

carminefb: fix possible access beyond end of carmine_modedb[]

This check is off-by-one.

Signed-off-by: Roel Kluin <roel.kluin@gmail.com>
Cc: Sebastian Siewior <bigeasy@linutronix.de>
Cc: Krzysztof Helt <krzysztof.h1@poczta.fm>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

Showing 1 changed file with 1 additions and 1 deletions Side-by-side Diff

drivers/video/carminefb.c
... ... @@ -562,7 +562,7 @@
562 562 if (ret < 0)
563 563 goto err_free_fb;
564 564  
565   - if (fb_mode > ARRAY_SIZE(carmine_modedb))
  565 + if (fb_mode >= ARRAY_SIZE(carmine_modedb))
566 566 fb_mode = CARMINEFB_DEFAULT_VIDEO_MODE;
567 567  
568 568 par->cur_mode = par->new_mode = ~0;