From: Greg Hudson <ghudson@mit.edu>
Date: Wed, 3 Nov 2010 16:43:49 +0000 (+0000)
Subject: Avoid running off the end of the spares array in db2's page_to_oaddr()
X-Git-Tag: krb5-1.10-alpha1~666
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=602ae0d3ad698ef15b49d0a24b2cf1a7cb05bb35;p=krb5.git

Avoid running off the end of the spares array in db2's page_to_oaddr()
in unrealistically large databases.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24507 dc483132-0cff-0310-8789-dd5450dbe970
---

diff --git a/src/plugins/kdb/db2/libdb2/hash/hash_page.c b/src/plugins/kdb/db2/libdb2/hash/hash_page.c
index f27e7dd86..5841e92b5 100644
--- a/src/plugins/kdb/db2/libdb2/hash/hash_page.c
+++ b/src/plugins/kdb/db2/libdb2/hash/hash_page.c
@@ -1276,7 +1276,7 @@ page_to_oaddr(hashp, pgno)
 	 * 3.  return...
 	 */
 	pgno -= hashp->hdr.hdrpages;
-	for (sp = 0; sp < NCACHED; sp++)
+	for (sp = 0; sp < NCACHED - 1; sp++)
 		if (POW2(sp) + hashp->hdr.spares[sp] < pgno &&
 		    (POW2(sp + 1) + hashp->hdr.spares[sp + 1]) > pgno)
 			break;