diff options
author | Michael Ellerman <michael@ellerman.id.au> | 2006-08-02 10:48:50 +1000 |
---|---|---|
committer | Paul Mackerras <paulus@samba.org> | 2006-09-26 15:24:34 +1000 |
commit | e12514650b167f48e952d50315fd492d01d42988 (patch) | |
tree | 8ac4f5ca248ef91a1a6550eba64cca2a80a9711b /security/Makefile | |
parent | 94983cb7881dff760d724759105a6f67935b571d (diff) |
[POWERPC] Fix loop logic in irq_alloc_virt()
There's a bug in irq_alloc_virt() if it's asked for more than 1 interrupt,
if it can't find a slot it might look past the end of the irq_map.
To be clear: the bug is that the continue affects the inner for loop,
not the outer one, so i becomes j + 1 and then we continue the inner
loop without checking if i is still <= limit.
This fixes it. No one in the kernel actually calls this with count >
1, so it's not critical.
Signed-off-by: Michael Ellerman <michael@ellerman.id.au>
Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
Signed-off-by: Paul Mackerras <paulus@samba.org>
Diffstat (limited to 'security/Makefile')
0 files changed, 0 insertions, 0 deletions