| commit | bd46fc406b30d1db1aff8dabaff8d18bb423fdcf | [log] [tgz] |
|---|---|---|
| author | Dan Carpenter <dan.carpenter@oracle.com> | Thu Aug 17 10:09:54 2017 +0300 |
| committer | Martin K. Petersen <martin.petersen@oracle.com> | Tue Aug 22 22:23:42 2017 -0400 |
| tree | 7279fb6cd3b1b6641550ad20e7f24152b50a9a7e | |
| parent | 723cd772fde2344a9810eeaf5106787d535ec4a4 [diff] |
scsi: sg: off by one in sg_ioctl()
If "val" is SG_MAX_QUEUE then we are one element beyond the end of the
"rinfo" array so the > should be >=.
Fixes: 109bade9c625 ("scsi: sg: use standard lists for sg_requests")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Douglas Gilbert <dgilbert@interlog.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>