This is a note to let you know that I've just added the patch titled partitions: aix.c: off by one bug to the 3.14-stable tree which can be found at: http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary The filename of the patch is: partitions-aix.c-off-by-one-bug.patch and it can be found in the queue-3.14 subdirectory. If you, or anyone else, feels it should not be added to the stable tree, please let <stable@xxxxxxxxxxxxxxx> know about it. >From d97a86c170b4e432f76db072a827fe30b4d6f659 Mon Sep 17 00:00:00 2001 From: Dan Carpenter <dan.carpenter@xxxxxxxxxx> Date: Tue, 5 Aug 2014 11:09:59 +0300 Subject: partitions: aix.c: off by one bug From: Dan Carpenter <dan.carpenter@xxxxxxxxxx> commit d97a86c170b4e432f76db072a827fe30b4d6f659 upstream. The lvip[] array has "state->limit" elements so the condition here should be >= instead of >. Fixes: 6ceea22bbbc8 ('partitions: add aix lvm partition support files') Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx> Acked-by: Philippe De Muyter <phdm@xxxxxxxxx> Signed-off-by: Jens Axboe <axboe@xxxxxx> Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> --- block/partitions/aix.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/block/partitions/aix.c +++ b/block/partitions/aix.c @@ -253,7 +253,7 @@ int aix_partition(struct parsed_partitio continue; } lv_ix = be16_to_cpu(p->lv_ix) - 1; - if (lv_ix > state->limit) { + if (lv_ix >= state->limit) { cur_lv_ix = -1; continue; } Patches currently in stable-queue which might be from dan.carpenter@xxxxxxxxxx are queue-3.14/partitions-aix.c-off-by-one-bug.patch queue-3.14/ib-mlx4-avoid-null-pointer-dereference-in-mlx4_ib_scan_netdevs.patch queue-3.14/nfc-microread-potential-overflows-in-microread_target_discovered.patch queue-3.14/scsi-libiscsi-fix-potential-buffer-overrun-in-__iscsi_conn_send_pdu.patch -- To unsubscribe from this list: send the line "unsubscribe stable" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html