nexthop: off by one in nexthop_mpath_select()
authorDan Carpenter <dan.carpenter@oracle.com>
Fri, 7 Jun 2019 15:31:07 +0000 (18:31 +0300)
committerDavid S. Miller <davem@davemloft.net>
Sun, 9 Jun 2019 20:37:25 +0000 (13:37 -0700)
commit5270041d342de6f1e6a3b6634c1ceaa67d1f87ea
treee822fa9d52aa7e6251996af9974b0b20f3b106da
parent90b8b7e755db648de7f1d17e3729dd7154a046a0
nexthop: off by one in nexthop_mpath_select()

The nhg->nh_entries[] array is allocated in nexthop_grp_alloc() and it
has nhg->num_nh elements so this check should be >= instead of >.

Fixes: 430a049190de ("nexthop: Add support for nexthop groups")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: David Ahern <dsahern@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
include/net/nexthop.h