[fireball] 36572: - Ports are counted starting from 1, with 0 being an invalid port index. Remove memory corruption by actually allocating MAX_ROOT_PORTS + 1 sized array. Fixes Coverity CID: 601.
Author: fireball Date: Sun Sep 28 06:05:18 2008 New Revision: 36572
URL: http://svn.reactos.org/svn/reactos?rev=36572&view=rev Log: - Ports are counted starting from 1, with 0 being an invalid port index. Remove memory corruption by actually allocating MAX_ROOT_PORTS + 1 sized array. Fixes Coverity CID: 601.
Modified: trunk/reactos/drivers/usb/nt4compat/usbdriver/hub.h
Modified: trunk/reactos/drivers/usb/nt4compat/usbdriver/hub.h URL: http://svn.reactos.org/svn/reactos/trunk/reactos/drivers/usb/nt4compat/usbdr... ============================================================================== --- trunk/reactos/drivers/usb/nt4compat/usbdriver/hub.h [iso-8859-1] (original) +++ trunk/reactos/drivers/usb/nt4compat/usbdriver/hub.h [iso-8859-1] Sun Sep 28 06:05:18 2008 @@ -208,7 +208,7 @@ USB_HUB_STATUS hub_status; USB_PORT_STATUS port_status; //working data buf for get port feature
- USB_PORT_STATUS rh_port_status[ EHCI_MAX_ROOT_PORTS ]; //working buf for get rh ports feature + USB_PORT_STATUS rh_port_status[ EHCI_MAX_ROOT_PORTS + 1 ]; //working buf for get rh ports feature
UCHAR multiple_tt; // boolean ULONG tt_status_map[ 4 ]; // bit map to indicate the indexed tt's periodic buffer busy or not
-
fireball＠svn.reactos.org