diff options
| author | Dan Carpenter <dan.carpenter@oracle.com> | 2013-11-08 04:46:10 -0500 |
|---|---|---|
| committer | Mark Brown <broonie@linaro.org> | 2013-11-19 14:07:07 -0500 |
| commit | b5f3d7af286a28e2fcc92debaba40844cb32bfb4 (patch) | |
| tree | 3bcdc3ca7051b6afcd0f00cba955f4701150a3f6 | |
| parent | 6020779b118f6221e5d067bd1e6b44bab6fc0276 (diff) | |
ASoC: rcar: off by one in rsnd_scu_set_route()
If "id == ARRAY_SIZE(routes)" then we read one space beyond the end of
the routes[] array.
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Kuninori Morimoto <kuninori.morimoto.gx@renesas.com>
Signed-off-by: Mark Brown <broonie@linaro.org>
| -rw-r--r-- | sound/soc/sh/rcar/scu.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sound/soc/sh/rcar/scu.c b/sound/soc/sh/rcar/scu.c index 1ab1bce6be7f..5e46ef2e8bb8 100644 --- a/sound/soc/sh/rcar/scu.c +++ b/sound/soc/sh/rcar/scu.c | |||
| @@ -68,7 +68,7 @@ static int rsnd_scu_set_route(struct rsnd_priv *priv, | |||
| 68 | return 0; | 68 | return 0; |
| 69 | 69 | ||
| 70 | id = rsnd_mod_id(mod); | 70 | id = rsnd_mod_id(mod); |
| 71 | if (id < 0 || id > ARRAY_SIZE(routes)) | 71 | if (id < 0 || id >= ARRAY_SIZE(routes)) |
| 72 | return -EIO; | 72 | return -EIO; |
| 73 | 73 | ||
| 74 | /* | 74 | /* |
