diff options
| author | Keir Fraser <keir.fraser@citrix.com> | 2010-03-30 13:27:25 +0100 |
|---|---|---|
| committer | Keir Fraser <keir.fraser@citrix.com> | 2010-03-30 13:27:25 +0100 |
| commit | fc90bf11d42f2da9d6172aafa35d90c536ceae2d (patch) | |
| tree | be050b67286fb2f9940b5c35e89962225daa5e13 /xen/common/memory.c | |
| parent | 402ce762cb88fa44cebb301abc8daaeb1574d9a2 (diff) | |
| download | xen-fc90bf11d42f2da9d6172aafa35d90c536ceae2d.tar.gz xen-fc90bf11d42f2da9d6172aafa35d90c536ceae2d.tar.bz2 xen-fc90bf11d42f2da9d6172aafa35d90c536ceae2d.zip | |
Fix off-by-one error in do_memory_op()'s start_extent range check
Signed-off-by: Jan Beulich <jbeulich@novell.com>
Diffstat (limited to 'xen/common/memory.c')
| -rw-r--r-- | xen/common/memory.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/xen/common/memory.c b/xen/common/memory.c index b1db5f5888..c7caa074c0 100644 --- a/xen/common/memory.c +++ b/xen/common/memory.c @@ -525,7 +525,7 @@ long do_memory_op(unsigned long cmd, XEN_GUEST_HANDLE(void) arg) if ( reservation.nr_extents > (ULONG_MAX >> MEMOP_EXTENT_SHIFT) ) return start_extent; - if ( unlikely(start_extent > reservation.nr_extents) ) + if ( unlikely(start_extent >= reservation.nr_extents) ) return start_extent; args.extent_list = reservation.extent_start; |