ring_f() tests for an invalid index which would overrun the
iocur_ring[] array and warns, but then uses it anyway.
Return immediately if it's out of bounds.
Signed-off-by: Eric Sandeen <sandeen@xxxxxxxxxx>
---
db/io.c | 4 +++-
1 files changed, 3 insertions(+), 1 deletions(-)
diff --git a/db/io.c b/db/io.c
index 9a787c8..6aba54e 100644
--- a/db/io.c
+++ b/db/io.c
@@ -358,8 +358,10 @@ ring_f(
}
index = (int)strtoul(argv[1], NULL, 0);
- if (index < 0 || index >= RING_ENTRIES)
+ if (index < 0 || index >= RING_ENTRIES) {
dbprintf(_("invalid entry: %d\n"), index);
+ return 0;
+ }
ring_current = index;
--
1.7.1
_______________________________________________
xfs mailing list
xfs@xxxxxxxxxxx
http://oss.sgi.com/mailman/listinfo/xfs
