commit b9ed7252d219c1c663944bf03846eabb515dbe75
author Roel Kluin <roel.kluin@gmail.com> Fri May 22 09:25:32 2009 +0200
committer Jens Axboe <jens.axboe@oracle.com> Fri May 22 09:59:51 2009 +0200
tree 9582f1255e501c5111ac88dbbba4a1f90beb223c
parent 0a7ae2ff0d29bb3b327edff4c8ab67b3834fa811

xen-blkfront: beyond ARRAY_SIZE of info->shadow

Do not go beyond ARRAY_SIZE of info->shadow
Signed-off-by: Roel Kluin <roel.kluin@gmail.com>
Acked-by: Jeremy Fitzhardinge <jeremy.fitzhardinge@citrix.com>
Signed-off-by: Jens Axboe <jens.axboe@oracle.com>

drivers/block/xen-blkfront.c

diff --git a/drivers/block/xen-blkfront.c b/drivers/block/xen-blkfront.c
index 6d4ac76..6d59508 100644
--- a/drivers/block/xen-blkfront.c
+++ b/drivers/block/xen-blkfront.c
@@ -122,7 +122,7 @@
 static int get_id_from_freelist(struct blkfront_info *info)
 {
 	unsigned long free = info->shadow_free;
-	BUG_ON(free > BLK_RING_SIZE);
+	BUG_ON(free >= BLK_RING_SIZE);
 	info->shadow_free = info->shadow[free].req.id;
 	info->shadow[free].req.id = 0x0fffffee; /* debug */
 	return free;