projects
/
platform
/
kernel
/
linux-starfive.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
0c89a43
)
net: sched: sch: Fix off by one in htb_activate_prios()
author
Dan Carpenter
<error27@gmail.com>
Mon, 6 Feb 2023 13:18:32 +0000
(16:18 +0300)
committer
Greg Kroah-Hartman
<gregkh@linuxfoundation.org>
Wed, 22 Feb 2023 11:59:56 +0000
(12:59 +0100)
commit
9cec2aaffe969f2a3e18b5ec105fc20bb908e475
upstream.
The > needs be >= to prevent an out of bounds access.
Fixes:
de5ca4c3852f
("net: sched: sch: Bounds check priority")
Signed-off-by: Dan Carpenter <error27@gmail.com>
Reviewed-by: Simon Horman <simon.horman@corigine.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
Link:
https://lore.kernel.org/r/Y+D+KN18FQI2DKLq@kili
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/sched/sch_htb.c
patch
|
blob
|
history
diff --git
a/net/sched/sch_htb.c
b/net/sched/sch_htb.c
index
14a202b
..
67b1879
100644
(file)
--- a/
net/sched/sch_htb.c
+++ b/
net/sched/sch_htb.c
@@
-429,7
+429,7
@@
static void htb_activate_prios(struct htb_sched *q, struct htb_class *cl)
while (m) {
unsigned int prio = ffz(~m);
- if (WARN_ON_ONCE(prio > ARRAY_SIZE(p->inner.clprio)))
+ if (WARN_ON_ONCE(prio >
=
ARRAY_SIZE(p->inner.clprio)))
break;
m &= ~(1 << prio);