diff options
author | Adrian Bunk <bunk@kernel.org> | 2008-10-13 18:42:55 -0700 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2008-10-13 18:42:55 -0700 |
commit | 9e9540b8f7b91c8818e2386add3b58a961459166 (patch) | |
tree | 8a30de4acba4f5d44a2291b409f84d139afc1a0f /drivers/isdn | |
parent | 6bff338bb60cb97f4ad06aa20f5c8e547eb1bc7a (diff) | |
download | lwn-9e9540b8f7b91c8818e2386add3b58a961459166.tar.gz lwn-9e9540b8f7b91c8818e2386add3b58a961459166.zip |
mISDN/dsp_cmx.c: fix size checks
The checks for ensuring that the array indices are inside the range
were flipped.
Reported-by: Adrian Bunk <bunk@kernel.org>
Signed-off-by: Adrian Bunk <bunk@kernel.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'drivers/isdn')
-rw-r--r-- | drivers/isdn/mISDN/dsp_cmx.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/drivers/isdn/mISDN/dsp_cmx.c b/drivers/isdn/mISDN/dsp_cmx.c index e92b1ba4b45e..c2f51cc50760 100644 --- a/drivers/isdn/mISDN/dsp_cmx.c +++ b/drivers/isdn/mISDN/dsp_cmx.c @@ -452,10 +452,10 @@ one_member: if (finddsp->features.pcm_id == dsp->features.pcm_id) { if (finddsp->pcm_slot_rx >= 0 && finddsp->pcm_slot_rx < sizeof(freeslots)) - freeslots[finddsp->pcm_slot_tx] = 0; + freeslots[finddsp->pcm_slot_rx] = 0; if (finddsp->pcm_slot_tx >= 0 && finddsp->pcm_slot_tx < sizeof(freeslots)) - freeslots[finddsp->pcm_slot_rx] = 0; + freeslots[finddsp->pcm_slot_tx] = 0; } } i = 0; |