From: Andy Adamson <andros@netapp.com>
Date: Wed, 9 Nov 2011 18:58:20 +0000 (-0500)
Subject: NFSv4.1: fix backchannel slotid off-by-one bug
X-Git-Tag: v3.0.18~77
X-Git-Url: https://www.infradead.org/git/?a=commitdiff_plain;h=58a902db8896b6bb4c779a223f6e8e7b289cdcc9;p=users%2Fdwmw2%2Flinux.git

NFSv4.1: fix backchannel slotid off-by-one bug

commit 61f2e5106582d02f30b6807e3f9c07463c572ccb upstream.

Signed-off-by: Andy Adamson <andros@netapp.com>
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
---

diff --git a/fs/nfs/callback_proc.c b/fs/nfs/callback_proc.c
index aaa09e948a9cf..b5c826e17b6ab 100644
--- a/fs/nfs/callback_proc.c
+++ b/fs/nfs/callback_proc.c
@@ -324,7 +324,7 @@ validate_seqid(struct nfs4_slot_table *tbl, struct cb_sequenceargs * args)
 	dprintk("%s enter. slotid %d seqid %d\n",
 		__func__, args->csa_slotid, args->csa_sequenceid);
 
-	if (args->csa_slotid > NFS41_BC_MAX_CALLBACKS)
+	if (args->csa_slotid >= NFS41_BC_MAX_CALLBACKS)
 		return htonl(NFS4ERR_BADSLOT);
 
 	slot = tbl->slots + args->csa_slotid;