Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux

NTB: fix pointer math issues

->remote_rx_info and ->rx_info are struct ntb_rx_info pointers. If we
add sizeof(struct ntb_rx_info) then it goes too far.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Jon Mason <jon.mason@intel.com>

authored by

Dan Carpenter and committed by
Jon Mason
cc0f868d ad3e2751

+2 -2
+2 -2
drivers/ntb/ntb_transport.c
··· 486 486 (qp_num / NTB_NUM_MW * rx_size); 487 487 rx_size -= sizeof(struct ntb_rx_info); 488 488 489 - qp->rx_buff = qp->remote_rx_info + sizeof(struct ntb_rx_info); 489 + qp->rx_buff = qp->remote_rx_info + 1; 490 490 qp->rx_max_frame = min(transport_mtu, rx_size); 491 491 qp->rx_max_entry = rx_size / qp->rx_max_frame; 492 492 qp->rx_index = 0; ··· 780 780 (qp_num / NTB_NUM_MW * tx_size); 781 781 tx_size -= sizeof(struct ntb_rx_info); 782 782 783 - qp->tx_mw = qp->rx_info + sizeof(struct ntb_rx_info); 783 + qp->tx_mw = qp->rx_info + 1; 784 784 qp->tx_max_frame = min(transport_mtu, tx_size); 785 785 qp->tx_max_entry = tx_size / qp->tx_max_frame; 786 786 qp->tx_index = 0;