From c47aa3e188e0e51b4dfdf957a140177bfc03a8da Mon Sep 17 00:00:00 2001 From: Andre Noll Date: Sun, 18 Nov 2007 20:49:56 +0100 Subject: [PATCH] Add additional sanity checks to osl_get_rank(). Check whether the riven rank is greater than zero and not greater than the number of rows in the table. --- osl.c | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/osl.c b/osl.c index 5c806419..9843a020 100644 --- a/osl.c +++ b/osl.c @@ -2013,8 +2013,17 @@ int osl_get_nth_row(const struct osl_table *t, unsigned col_num, { struct osl_column *col; struct rb_node *node; - int ret = check_rbtree_col(t, col_num, &col); + unsigned num_rows; + int ret; + if (n == 0) + return -E_RB_KEY_NOT_FOUND; + ret = osl_get_num_rows(t, &num_rows); + if (ret < 0) + return ret; + if (n > num_rows) + return -E_RB_KEY_NOT_FOUND; + ret = check_rbtree_col(t, col_num, &col); if (ret < 0) return ret; node = rb_nth(col->rbtree.rb_node, n); -- 2.39.5