summaryrefslogtreecommitdiffstats
path: root/src
diff options
context:
space:
mode:
authorHarald Welte2011-07-16 17:37:34 +0200
committerHarald Welte2011-07-16 17:37:34 +0200
commitcd4da1d350bb514e1da6ebe732d397706bb83af3 (patch)
treef47093a2f9d36cb1900e08ab1ea9962777014090 /src
parentosmocon: if we ignore a return value, we don't need to assign it to a variable (diff)
downloadosmocom-cd4da1d350bb514e1da6ebe732d397706bb83af3.tar.gz
osmocom-cd4da1d350bb514e1da6ebe732d397706bb83af3.tar.xz
osmocom-cd4da1d350bb514e1da6ebe732d397706bb83af3.zip
gsm48_rr: Don't overflow array boundary
Detected by Smatch: src/host/layer23/src/mobile/gsm48_rr.c +3021 gsm48_rr_render_ma(89) warn: buffer overflow 'cd->freq_seq_lv' 10 <= 10 src/host/layer23/src/mobile/gsm48_rr.c +3023 gsm48_rr_render_ma(91) error: buffer overflow 'cd->freq_seq_lv' 10 <= 10
Diffstat (limited to 'src')
-rw-r--r--src/host/layer23/src/mobile/gsm48_rr.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/host/layer23/src/mobile/gsm48_rr.c b/src/host/layer23/src/mobile/gsm48_rr.c
index 13eb1fd..68116c5 100644
--- a/src/host/layer23/src/mobile/gsm48_rr.c
+++ b/src/host/layer23/src/mobile/gsm48_rr.c
@@ -3016,7 +3016,7 @@ static int gsm48_rr_render_ma(struct osmocom_ms *ms, struct gsm48_rr_cd *cd,
LOGP(DRR, LOGL_INFO, "Listed Sequence ARFCN #%d: %s\n", j,
gsm_print_arfcn(arfcn | pcs));
ma[j++] = arfcn;
- for (i = 0; i <= 16; i++) {
+ for (i = 0; i < 16; i++) {
if ((i & 1))
inc = cd->freq_seq_lv[2 + (i >> 1)] & 0x0f;
else