aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorFlorian Westphal <fw@strlen.de>2009-05-21 15:07:12 -0700
committerDavid S. Miller <davem@davemloft.net>2009-05-21 15:07:12 -0700
commit5b5f792a6a9a2f9ae812d151ed621f72e99b1725 (patch)
tree5fe7c961a9f7a14cdae342311fa9a00e8155cb86
parentc40499e04b2005e61f989824251f9343b55f96bb (diff)
downloadkernel_samsung_smdk4412-5b5f792a6a9a2f9ae812d151ed621f72e99b1725.zip
kernel_samsung_smdk4412-5b5f792a6a9a2f9ae812d151ed621f72e99b1725.tar.gz
kernel_samsung_smdk4412-5b5f792a6a9a2f9ae812d151ed621f72e99b1725.tar.bz2
pktgen: do not access flows[] beyond its length
typo -- pkt_dev->nflows is for stats only, the number of concurrent flows is stored in cflows. Reported-By: Vladimir Ivashchenko <hazard@francoudi.com> Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: David S. Miller <davem@davemloft.net>
-rw-r--r--net/core/pktgen.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/net/core/pktgen.c b/net/core/pktgen.c
index 3779c14..0666a82 100644
--- a/net/core/pktgen.c
+++ b/net/core/pktgen.c
@@ -2447,7 +2447,7 @@ static inline void free_SAs(struct pktgen_dev *pkt_dev)
if (pkt_dev->cflows) {
/* let go of the SAs if we have them */
int i = 0;
- for (; i < pkt_dev->nflows; i++){
+ for (; i < pkt_dev->cflows; i++) {
struct xfrm_state *x = pkt_dev->flows[i].x;
if (x) {
xfrm_state_put(x);