| commit | ecd89c02da85f724a2d24bc5a7e28043cc24b5d7 | [log] [tgz] |
|---|---|---|
| author | Dan Carpenter <dan.carpenter@oracle.com> | Tue Jun 29 11:25:13 2021 +0300 |
| committer | David S. Miller <davem@davemloft.net> | Tue Jun 29 11:49:44 2021 -0700 |
| tree | 01e114b8af6a1b8944f3b5b7196df9df9631700d | |
| parent | 66f1546dfd7debe50fc056a84b97f2a56c2d769d [diff] |
gve: DQO: Fix off by one in gve_rx_dqo()
The rx->dqo.buf_states[] array is allocated in gve_rx_alloc_ring_dqo()
and it has rx->dqo.num_buf_states so this > needs to >= to prevent an
out of bounds access.
Fixes: 9b8dd5e5ea48 ("gve: DQO: Add RX path")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>