From 28a604ff850e6f1520e07c788ff772018f6c1c7e Mon Sep 17 00:00:00 2001 From: Sivakanth vaka Date: Thu, 25 Mar 2021 15:44:12 +0530 Subject: [PATCH] veth_ipa:fix for array out of bound access acceesing out of array while mapping the descriptors. Change-Id: I06f57aa28f582db03b911ce1ad711c33ca57c112 Signed-off-by: Sivakanth vaka --- drivers/platform/msm/veth_ipa/veth_ipa.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/platform/msm/veth_ipa/veth_ipa.c b/drivers/platform/msm/veth_ipa/veth_ipa.c index ea30e4eca650..cb2eca96357d 100644 --- a/drivers/platform/msm/veth_ipa/veth_ipa.c +++ b/drivers/platform/msm/veth_ipa/veth_ipa.c @@ -596,7 +596,7 @@ static int veth_map_rx_tx_setup_info_params( } - for (i = 0; i <= rx_setup_info->num_buffers; i++) { + for (i = 0; i < rx_setup_info->num_buffers; i++) { rx_setup_info->data_buff_list[i].iova = rx_setup_info->data_buff_list[0].iova + i*VETH_ETH_FRAME_LEN_IPA; @@ -629,7 +629,7 @@ static int veth_map_rx_tx_setup_info_params( tx_setup_info->data_buff_list[0].iova = veth_emac_mem->tx_buf_mem_iova; } - for (i = 0; i <= tx_setup_info->num_buffers; i++) { + for (i = 0; i < tx_setup_info->num_buffers; i++) { tx_setup_info->data_buff_list[i].iova = tx_setup_info->data_buff_list[0].iova + i*VETH_ETH_FRAME_LEN_IPA;