From 602ae0d3ad698ef15b49d0a24b2cf1a7cb05bb35 Mon Sep 17 00:00:00 2001 From: Greg Hudson Date: Wed, 3 Nov 2010 16:43:49 +0000 Subject: Avoid running off the end of the spares array in db2's page_to_oaddr() in unrealistically large databases. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24507 dc483132-0cff-0310-8789-dd5450dbe970 --- src/plugins/kdb/db2/libdb2/hash/hash_page.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src/plugins/kdb') diff --git a/src/plugins/kdb/db2/libdb2/hash/hash_page.c b/src/plugins/kdb/db2/libdb2/hash/hash_page.c index f27e7dd86a..5841e92b5f 100644 --- a/src/plugins/kdb/db2/libdb2/hash/hash_page.c +++ b/src/plugins/kdb/db2/libdb2/hash/hash_page.c @@ -1276,7 +1276,7 @@ page_to_oaddr(hashp, pgno) * 3. return... */ pgno -= hashp->hdr.hdrpages; - for (sp = 0; sp < NCACHED; sp++) + for (sp = 0; sp < NCACHED - 1; sp++) if (POW2(sp) + hashp->hdr.spares[sp] < pgno && (POW2(sp + 1) + hashp->hdr.spares[sp + 1]) > pgno) break; -- cgit