Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 26 Apr 2016 13:31:54 -0500
From:      Pedro Giffuni <pfg@FreeBSD.org>
To:        "Conrad E. Meyer" <cem@FreeBSD.org>, src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org
Subject:   Re: svn commit: r298657 - head/sys/dev/sound/pci
Message-ID:  <95061c6a-ac25-3c0f-a1f0-1956477b2fc3@FreeBSD.org>
In-Reply-To: <201604261820.u3QIKf92094942@repo.freebsd.org>
References:  <201604261820.u3QIKf92094942@repo.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help


On 04/26/16 13:20, Conrad E. Meyer wrote:
> Author: cem
> Date: Tue Apr 26 18:20:41 2016
> New Revision: 298657
> URL: https://svnweb.freebsd.org/changeset/base/298657
>
> Log:
>   emu10kx: Don't iterate beyond array bounds
>
>   Reported by:	Coverity
>   CID:		1354978
>   Sponsored by:	EMC / Isilon Storage Division
>
> Modified:
>   head/sys/dev/sound/pci/emu10kx.c
>
> Modified: head/sys/dev/sound/pci/emu10kx.c
> ==============================================================================
> --- head/sys/dev/sound/pci/emu10kx.c	Tue Apr 26 18:17:44 2016	(r298656)
> +++ head/sys/dev/sound/pci/emu10kx.c	Tue Apr 26 18:20:41 2016	(r298657)
> @@ -587,7 +587,7 @@ emu_getcard(device_t dev)
>  		}
>  	}
>
> -	for (i = 0; i < nitems(emu_cards); i++) {
> +	for (i = 0; i < nitems(emu_bad_cards); i++) {
>  		if (device == emu_bad_cards[i].device) {
>  			if (subdevice == emu_bad_cards[i].subdevice) {
>  				thiscard = 0;
>

Hmm sadly interesting.
This was not a script or an old bug; it was pilot error.

Pointyhat:	pfg

Thanks!




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?95061c6a-ac25-3c0f-a1f0-1956477b2fc3>