From: Eric Sesterhenn / Snakebyte Another coverity patch i forgot to resend, original thread here http://marc.info/?l=linux-kernel&m=115144559823592&w=2 In case drive == N_DRIVE, we get one past the drive_params array. Signed-off-by: Eric Sesterhenn Signed-off-by: Andrew Morton --- drivers/block/floppy.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff -puN drivers/block/floppy.c~off-by-one-in-floppyc drivers/block/floppy.c --- a/drivers/block/floppy.c~off-by-one-in-floppyc +++ a/drivers/block/floppy.c @@ -670,7 +670,7 @@ static void __reschedule_timeout(int dri if (drive == current_reqD) drive = current_drive; del_timer(&fd_timeout); - if (drive < 0 || drive > N_DRIVE) { + if (drive < 0 || drive >= N_DRIVE) { fd_timeout.expires = jiffies + 20UL * HZ; drive = 0; } else _