Changeset 12141 in vbox

Timestamp:

Sep 5, 2008 3:49:14 PM (17 years ago)

Author:

vboxsync

svn:sync-xref-src-repo-rev:

36101

Message:

timer-r0drv-linux. Fixed bug in RTTimerStart where changes to the +1 entry in the aSubTimers array was made. This may have caused heap corruption and/or kernel panics.

File:

• trunk/src/VBox/Runtime/r0drv/linux/timer-r0drv-linux.c (modified) (2 diffs)

trunk/src/VBox/Runtime/r0drv/linux/timer-r0drv-linux.c

@@ -470 +470 @@
     {
         RTMpGetOnlineSet(&OnlineSet);
-        for (iCpu = 0; iCpu <= pTimer->cCpus; iCpu++)
+        for (iCpu = 0; iCpu < pTimer->cCpus; iCpu++)
         {
             Assert(pTimer->aSubTimers[iCpu].enmState != RTTIMERLNXSTATE_MP_STOPPING);
@@ -498 +498 @@
     RTSpinlockAcquire(pTimer->hSpinlock, &Tmp);
 
-    for (iCpu = 0; iCpu <= pTimer->cCpus; iCpu++)
+    for (iCpu = 0; iCpu < pTimer->cCpus; iCpu++)
         if (rtTimerLnxCmpXchgState(&pTimer->aSubTimers[iCpu].enmState, RTTIMERLNXSTATE_STOPPED, RTTIMERLNXSTATE_STARTING))
         {