diff options
| author | Dan Carpenter <dan.carpenter@oracle.com> | 2011-09-27 09:20:50 +0300 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@suse.de> | 2011-09-29 13:23:33 -0700 |
| commit | 53d785ccd918d571c227d459477793872676fc02 (patch) | |
| tree | 538c8f731207bf916aad708b5c39f03b9ab58c55 /lib/parser.c | |
| parent | 268e526b935e794386d75025577b745e6bd57f13 (diff) | |
TTY: snyclinkmp: forever loop in tx_load_dma_buffer()
My main concern here was the line that said:
copy_count = min_t(unsigned short,count,SCABUFSIZE);
"count" is an unsigned int here so the cast to unsigned short
truncates the upper bits. So if count is 0x10000 then copy_count is
0 and the loop never exits.
"count" comes from skb->len in hdlcdev_xmit().
The other min_t() changes are just cleanups.
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
Diffstat (limited to 'lib/parser.c')
0 files changed, 0 insertions, 0 deletions