-
Liam Merwick authored
In the assert checking the array dereference of JobVerbTable[verb] in job_apply_verb() the check of the index, verb, allows an overrun because an index equal to the array size is permitted. Similarly, in the assert check of JobSTT[s0][s1] with index s1 in job_state_transition(), an off-by-one overrun is not flagged either. This is not a run-time issue as there are no callers actually passing in the max value. Signed-off-by:
Liam Merwick <Liam.Merwick@oracle.com> Reviewed-by:
Darren Kenny <Darren.Kenny@oracle.com> Reviewed-by:
Mark Kanda <Mark.Kanda@oracle.com> Reviewed-by:
Eric Blake <eblake@redhat.com> Reviewed-by:
John Snow <jsnow@redhat.com> Message-id: 1541453919-25973-2-git-send-email-Liam.Merwick@oracle.com Signed-off-by:
Max Reitz <mreitz@redhat.com>
Liam Merwick authoredIn the assert checking the array dereference of JobVerbTable[verb] in job_apply_verb() the check of the index, verb, allows an overrun because an index equal to the array size is permitted. Similarly, in the assert check of JobSTT[s0][s1] with index s1 in job_state_transition(), an off-by-one overrun is not flagged either. This is not a run-time issue as there are no callers actually passing in the max value. Signed-off-by:
Liam Merwick <Liam.Merwick@oracle.com> Reviewed-by:
Darren Kenny <Darren.Kenny@oracle.com> Reviewed-by:
Mark Kanda <Mark.Kanda@oracle.com> Reviewed-by:
Eric Blake <eblake@redhat.com> Reviewed-by:
John Snow <jsnow@redhat.com> Message-id: 1541453919-25973-2-git-send-email-Liam.Merwick@oracle.com Signed-off-by:
Max Reitz <mreitz@redhat.com>