diff options
| author | Keir Fraser <keir.fraser@citrix.com> | 2010-03-30 13:28:17 +0100 |
|---|---|---|
| committer | Keir Fraser <keir.fraser@citrix.com> | 2010-03-30 13:28:17 +0100 |
| commit | e53bd6060d1be3bfa093b9fc07894b2489a21946 (patch) | |
| tree | bd522d6d0ca056c6c0c3a81bfa7ef51142df1b50 | |
| parent | 79b6634ae4088dedb6397f84274946cf027f920b (diff) | |
| download | xen-e53bd6060d1be3bfa093b9fc07894b2489a21946.tar.gz xen-e53bd6060d1be3bfa093b9fc07894b2489a21946.tar.bz2 xen-e53bd6060d1be3bfa093b9fc07894b2489a21946.zip | |
Fix off-by-one error in do_memory_op()'s start_extent range check
Signed-off-by: Jan Beulich <jbeulich@novell.com>
xen-unstable changeset: 21085:81d785fae7af
xen-unstable date: Tue Mar 30 13:27:25 2010 +0100
| -rw-r--r-- | xen/common/memory.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/xen/common/memory.c b/xen/common/memory.c index b1db5f5888..c7caa074c0 100644 --- a/xen/common/memory.c +++ b/xen/common/memory.c @@ -525,7 +525,7 @@ long do_memory_op(unsigned long cmd, XEN_GUEST_HANDLE(void) arg) if ( reservation.nr_extents > (ULONG_MAX >> MEMOP_EXTENT_SHIFT) ) return start_extent; - if ( unlikely(start_extent > reservation.nr_extents) ) + if ( unlikely(start_extent >= reservation.nr_extents) ) return start_extent; args.extent_list = reservation.extent_start; |