flex_array: fix the panic when calling flex_array_alloc() without __G…

…FP_ZERO memset() is called with the wrong address and the kernel panics. Signed-off-by: Changli Gao <[email protected]> Cc: Patrick McHardy <[email protected]> Acked-by: David Rientjes <[email protected]> Cc: <[email protected]> Signed-off-by: Andrew Morton <[email protected]> Signed-off-by: Linus Torvalds <[email protected]>
ambv · Apr 24, 2010 · e59464c · e59464c
1 parent 46da276
commit e59464c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/flex_array.c b/lib/flex_array.c
@@ -99,7 +99,7 @@ struct flex_array *flex_array_alloc(int element_size, unsigned int total,
 	ret->element_size = element_size;
 	ret->total_nr_elements = total;
 	if (elements_fit_in_base(ret) && !(flags & __GFP_ZERO))
-		memset(ret->parts[0], FLEX_ARRAY_FREE,
+		memset(&ret->parts[0], FLEX_ARRAY_FREE,
 						FLEX_ARRAY_BASE_BYTES_LEFT);
 	return ret;
 }