DragonFlyBSD Kernel Audit
DF-1194 / fix.diff
← back to finding ↓ download raw
diff --git a/sys/dev/raid/ciss/ciss.c b/sys/dev/raid/ciss/ciss.c
--- a/sys/dev/raid/ciss/ciss.c
+++ b/sys/dev/raid/ciss/ciss.c
@@ -1373,7 +1373,7 @@
 	kmalloc(sc->ciss_max_logical_bus * sizeof(struct ciss_ldrive *),
 		CISS_MALLOC_CLASS, M_INTWAIT | M_ZERO);
 
-    for (i = 0; i <= sc->ciss_max_logical_bus; i++) {
+    for (i = 0; i < sc->ciss_max_logical_bus; i++) {
 	sc->ciss_logical[i] =
 	    kmalloc(CISS_MAX_LOGICAL * sizeof(struct ciss_ldrive),
 		    CISS_MALLOC_CLASS, M_INTWAIT | M_ZERO);
@@ -1950,7 +1950,7 @@
     if (sc->ciss_parent_dmat)
 	bus_dma_tag_destroy(sc->ciss_parent_dmat);
     if (sc->ciss_logical) {
-	for (i = 0; i <= sc->ciss_max_logical_bus; i++) {
+	for (i = 0; i < sc->ciss_max_logical_bus; i++) {
 	    for (j = 0; j < CISS_MAX_LOGICAL; j++) {
 		if (sc->ciss_logical[i][j].cl_ldrive)
 		    kfree(sc->ciss_logical[i][j].cl_ldrive, CISS_MALLOC_CLASS);