summaryrefslogtreecommitdiffstats
path: root/drivers
diff options
context:
space:
mode:
authorMatt Carlson <mcarlson@broadcom.com>2011-06-02 13:01:39 +0000
committerDavid S. Miller <davem@davemloft.net>2011-06-03 00:01:30 -0700
commit9a2e0fb0893ddf595d0a372e681f5b98017c6d90 (patch)
treefc32f2ae2fefe55bfe5b3381629b33550f7adea6 /drivers
parentec764bf083a6ff396234351b51fd236f53c903bf (diff)
downloadlinux-stable-9a2e0fb0893ddf595d0a372e681f5b98017c6d90.tar.gz
linux-stable-9a2e0fb0893ddf595d0a372e681f5b98017c6d90.tar.bz2
linux-stable-9a2e0fb0893ddf595d0a372e681f5b98017c6d90.zip
tg3: Fix tg3_skb_error_unmap()
This function attempts to free one fragment beyond the number of fragments that were actually mapped. This patch brings back the limit to the correct spot. Signed-off-by: Matt Carlson <mcarlson@broadcom.com> Tested-by: Alex Williamson <alex.williamson@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'drivers')
-rw-r--r--drivers/net/tg3.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/net/tg3.c b/drivers/net/tg3.c
index f4b01c638a33..a1f9f9eef37d 100644
--- a/drivers/net/tg3.c
+++ b/drivers/net/tg3.c
@@ -5774,7 +5774,7 @@ static void tg3_skb_error_unmap(struct tg3_napi *tnapi,
dma_unmap_addr(txb, mapping),
skb_headlen(skb),
PCI_DMA_TODEVICE);
- for (i = 0; i <= last; i++) {
+ for (i = 0; i < last; i++) {
skb_frag_t *frag = &skb_shinfo(skb)->frags[i];
entry = NEXT_TX(entry);