From: Milan Broz The table is indexed from 0, so an index equal to t->num_targets should be rejected. (There is no code in the current tree that would exercise this bug.) Signed-off-by: Milan Broz Signed-off-by: Alasdair G Kergon Signed-off-by: Andrew Morton --- drivers/md/dm-table.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff -puN drivers/md/dm-table.c~dm-table-get_target-fix-last-index drivers/md/dm-table.c --- devel/drivers/md/dm-table.c~dm-table-get_target-fix-last-index 2006-05-30 14:52:54.000000000 -0700 +++ devel-akpm/drivers/md/dm-table.c 2006-05-30 14:52:54.000000000 -0700 @@ -802,7 +802,7 @@ sector_t dm_table_get_size(struct dm_tab struct dm_target *dm_table_get_target(struct dm_table *t, unsigned int index) { - if (index > t->num_targets) + if (index >= t->num_targets) return NULL; return t->targets + index; _