svn commit: r275583 - head/sys/arm/mv

[Zbigniew Bodek]

Author: zbb
Date: Sun Dec  7 21:02:45 2014
New Revision: 275583
URL: https://svnweb.freebsd.org/changeset/base/275583

Log:
  Fix buffer overflow in Marvell PCI/PCIe driver
  
  Buffer overflow occured when more than one MSI was allocated.
  
  Submitted by:    Wojciech Macek <wma at semihalf.com>
  Obtained from:   Semihalf

Modified:
  head/sys/arm/mv/mv_pci.c

Modified: head/sys/arm/mv/mv_pci.c
==============================================================================
--- head/sys/arm/mv/mv_pci.c	Sun Dec  7 20:32:24 2014	(r275582)
+++ head/sys/arm/mv/mv_pci.c	Sun Dec  7 21:02:45 2014	(r275583)
@@ -1171,7 +1171,7 @@ mv_pcib_alloc_msi(device_t dev, device_t
 
 	for (i = start; i < start + count; i++) {
 		setbit(&sc->sc_msi_bitmap, i);
-		irqs[i] = MSI_IRQ + i;
+		*irqs++ = MSI_IRQ + i;
 	}
 	debugf("%s: start: %x count: %x\n", __func__, start, count);