id[] buffer is accessed over its bounds.
Signed-off-by: Sasha Khapyorsky <[EMAIL PROTECTED]>
---
opensm/osmtest/osmt_service.c | 9 +++++----
1 files changed, 5 insertions(+), 4 deletions(-)
diff --git a/opensm/osmtest/osmt_service.c b/opensm/osmtest/osmt_service.c
index ce13500..738a1d8 100644
--- a/opensm/osmtest/osmt_service.c
+++ b/opensm/osmtest/osmt_service.c
@@ -1211,7 +1211,7 @@ ib_api_status_t osmt_run_service_records_flow(IN
osmtest_t * const p_osmt)
OSM_LOG_ENTER(&p_osmt->log);
/* Init Service names */
- for (i = 0; i <= 6; i++) {
+ for (i = 0; i < 7; i++) {
#ifdef __WIN__
uint64_t rand_val = rand() - (uint64_t) i;
#else
@@ -1223,6 +1223,7 @@ ib_api_status_t osmt_run_service_records_flow(IN
osmtest_t * const p_osmt)
"osmt.srvc.%" PRIu64 ".%" PRIu64, rand_val, pid);
/*printf("-I- Service Name is : %s, ID is : 0x%" PRIx64
"\n",service_name[i],id[i]); */
}
+
status = osmt_register_service(p_osmt, cl_ntoh64(id[0]), /* IN
ib_net64_t service_id, */
IB_DEFAULT_PKEY, /* IN ib_net16_t
service_pkey, */
0xFFFFFFFF, /* IN ib_net32_t
service_lease, */
@@ -1377,12 +1378,12 @@ ib_api_status_t osmt_run_service_records_flow(IN
osmtest_t * const p_osmt)
goto Exit;
}
- /* Bad Flow of Get with invalid Service ID: id[7] */
- status = osmt_get_service_by_id(p_osmt, 0, cl_ntoh64(id[7]), &srv_rec);
+ /* Bad Flow of Get with invalid Service ID: id[6] */
+ status = osmt_get_service_by_id(p_osmt, 0, cl_ntoh64(id[6]), &srv_rec);
if (status != IB_SUCCESS) {
OSM_LOG(&p_osmt->log, OSM_LOG_ERROR, "ERR 4A20: "
"Found service: id: 0x%016" PRIx64 " "
- "that is invalid\n", id[7]);
+ "that is invalid\n", id[6]);
status = IB_ERROR;
goto Exit;
}
--
1.5.5.1.178.g1f811
_______________________________________________
general mailing list
[email protected]
http://lists.openfabrics.org/cgi-bin/mailman/listinfo/general
To unsubscribe, please visit http://openib.org/mailman/listinfo/openib-general
