From: Dan Carpenter <dan.carpenter@oracle.com>
Date: Mon, 19 Oct 2015 10:16:49 +0000 (+0300)
Subject: irda: precedence bug in irlmp_seq_hb_idx()
X-Git-Tag: v3.2.74~5
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a8ab3e639d481658fc9da76de80485a5247c3a68;p=pandora-kernel.git

irda: precedence bug in irlmp_seq_hb_idx()

[ Upstream commit 50010c20597d14667eff0fdb628309986f195230 ]

This is decrementing the pointer, instead of the value stored in the
pointer.  KASan detects it as an out of bounds reference.

Reported-by: "Berry Cheng 程君(成淼)" <chengmiao.cj@alibaba-inc.com>
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---

Reading git-diff-tree failed