From: Dan Carpenter <dan.carpenter@oracle.com>
Date: Fri, 8 Nov 2013 09:45:33 +0000 (+0300)
Subject: metag: off by one in setup_bootmem_node()
X-Git-Tag: v3.13-rc1~129^2
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=51387306b5c2b0c9eb1e2556de1b37267bb2b583;p=platform%2Fkernel%2Flinux-exynos.git

metag: off by one in setup_bootmem_node()

If "nid == MAX_NUMNODES" then we write beyond the end of the node_data[]
array.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: James Hogan <james.hogan@imgtec.com>
---

diff --git a/arch/metag/mm/numa.c b/arch/metag/mm/numa.c
index 9ae578c..b172aa4 100644
--- a/arch/metag/mm/numa.c
+++ b/arch/metag/mm/numa.c
@@ -34,7 +34,7 @@ void __init setup_bootmem_node(int nid, unsigned long start, unsigned long end)
 	unsigned long pgdat_paddr;
 
 	/* Don't allow bogus node assignment */
-	BUG_ON(nid > MAX_NUMNODES || nid <= 0);
+	BUG_ON(nid >= MAX_NUMNODES || nid <= 0);
 
 	start_pfn = start >> PAGE_SHIFT;
 	end_pfn = end >> PAGE_SHIFT;