diff options
| author | Ed Maste <emaste@FreeBSD.org> | 2023-08-28 03:38:30 +0000 |
|---|---|---|
| committer | Ed Maste <emaste@FreeBSD.org> | 2023-09-09 15:16:19 +0000 |
| commit | e4e41b39a4dc22a31c7d239ca1ac29bdd6c10b47 (patch) | |
| tree | fa71f6130d10a0731f71ba19c7eaf42d60cfa747 | |
| parent | 3284a5929d50131be0c453805558d7f3311f7ed5 (diff) | |
| download | src-e4e41b39a4dc22a31c7d239ca1ac29bdd6c10b47.tar.gz src-e4e41b39a4dc22a31c7d239ca1ac29bdd6c10b47.zip | |
iir: prevent negative offsets in ioctl
MFS of direct commit to stable/13 as this driver has been removed from
main in commit 399188a2c60c ("iir: Remove").
PR: 273328
Reported by: ChenHao Lu
Sponsored by: The FreeBSD Foundation
(cherry picked from commit b5a5a06fc012d27c6937776bff8469ea465c3873)
| -rw-r--r-- | sys/dev/iir/iir.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/dev/iir/iir.c b/sys/dev/iir/iir.c index 35ceef8d66a5..f6430b7c5a71 100644 --- a/sys/dev/iir/iir.c +++ b/sys/dev/iir/iir.c @@ -1855,7 +1855,7 @@ int gdt_read_event(int handle, gdt_evt_str *estr) eindex = handle; estr->event_source = 0; - if (eindex >= GDT_MAX_EVENTS) { + if (eindex < 0 || eindex >= GDT_MAX_EVENTS) { mtx_unlock(&elock); return eindex; } |