Module Name:    src
Committed By:   christos
Date:           Mon Feb  1 17:39:41 UTC 2016

Modified Files:
        src/sys/arch/pmax/pmax: machdep.c

Log Message:
PR/50737: David Binderman: Check bounds before dereferencing.


To generate a diff of this commit:
cvs rdiff -u -r1.249 -r1.250 src/sys/arch/pmax/pmax/machdep.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: src/sys/arch/pmax/pmax/machdep.c
diff -u src/sys/arch/pmax/pmax/machdep.c:1.249 src/sys/arch/pmax/pmax/machdep.c:1.250
--- src/sys/arch/pmax/pmax/machdep.c:1.249	Mon Jun 29 22:39:04 2015
+++ src/sys/arch/pmax/pmax/machdep.c	Mon Feb  1 12:39:41 2016
@@ -1,4 +1,4 @@
-/*	$NetBSD: machdep.c,v 1.249 2015/06/30 02:39:04 matt Exp $	*/
+/*	$NetBSD: machdep.c,v 1.250 2016/02/01 17:39:41 christos Exp $	*/
 
 /*
  * Copyright (c) 1988 University of Utah.
@@ -39,7 +39,7 @@
  */
 
 #include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: machdep.c,v 1.249 2015/06/30 02:39:04 matt Exp $");
+__KERNEL_RCSID(0, "$NetBSD: machdep.c,v 1.250 2016/02/01 17:39:41 christos Exp $");
 
 #include "opt_ddb.h"
 #include "opt_modular.h"
@@ -524,7 +524,7 @@ memsize_bitmap(void *first)
 	segstart = curaddr = i = segnum = 0;
 	xsize = prom_memmap->pagesize * 8;
 	while (i < mapbytes) {
-		while (prom_memmap->bitmap[i] == 0xff && i < mapbytes) {
+		while (i < mapbytes && prom_memmap->bitmap[i] == 0xff) {
 			++i;
 			curaddr += xsize;
 		}

Reply via email to