⬢ DragonFlyBSD Kernel Audit
DF-3925 / fix.diff
← back to finding ↓ download raw
--- a/sys/dev/raid/hptmv/entry.c
+++ b/sys/dev/raid/hptmv/entry.c
@@ -859,6 +859,11 @@
 			{
 				MV_U8   channel = param2;
 
+				if (channel >= MV_SATA_CHANNELS_NUM) {
+					MV_ERROR("RR18xx: event channel %d out of range\n", channel);
+					return MV_FALSE;
+				}
+
 				if (param1 == EVENT_CONNECT)
 				{
 					pAdapter->sataEvents[channel] = SATA_EVENT_CHANNEL_CONNECTED;