From f1b91af95ea4573314ee32699e9168898730c6f4 Mon Sep 17 00:00:00 2001
From: ericm <ericm>
Date: Mon, 22 Dec 2003 12:29:21 +0000
Subject: [PATCH] TCPNAL:   array out-of-bounds in tcpnal_send().

---
 lnet/ulnds/socklnd/tcplnd.c   | 2 +-
 lnet/ulnds/tcplnd.c           | 2 +-
 lustre/portals/unals/tcpnal.c | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/lnet/ulnds/socklnd/tcplnd.c b/lnet/ulnds/socklnd/tcplnd.c
index 8e84142..0c47f42 100644
--- a/lnet/ulnds/socklnd/tcplnd.c
+++ b/lnet/ulnds/socklnd/tcplnd.c
@@ -98,7 +98,7 @@ ptl_err_t tcpnal_send(nal_cb_t *n,
 
     pthread_mutex_lock(&send_lock);
 #if 1
-    for (i = total = 0; i <= ntiov; i++)
+    for (i = total = 0; i < ntiov; i++)
             total += tiov[i].iov_len;
     
     sysrc = syscall(SYS_writev, c->fd, tiov, ntiov);
diff --git a/lnet/ulnds/tcplnd.c b/lnet/ulnds/tcplnd.c
index 8e84142..0c47f42 100644
--- a/lnet/ulnds/tcplnd.c
+++ b/lnet/ulnds/tcplnd.c
@@ -98,7 +98,7 @@ ptl_err_t tcpnal_send(nal_cb_t *n,
 
     pthread_mutex_lock(&send_lock);
 #if 1
-    for (i = total = 0; i <= ntiov; i++)
+    for (i = total = 0; i < ntiov; i++)
             total += tiov[i].iov_len;
     
     sysrc = syscall(SYS_writev, c->fd, tiov, ntiov);
diff --git a/lustre/portals/unals/tcpnal.c b/lustre/portals/unals/tcpnal.c
index 8e84142..0c47f42 100644
--- a/lustre/portals/unals/tcpnal.c
+++ b/lustre/portals/unals/tcpnal.c
@@ -98,7 +98,7 @@ ptl_err_t tcpnal_send(nal_cb_t *n,
 
     pthread_mutex_lock(&send_lock);
 #if 1
-    for (i = total = 0; i <= ntiov; i++)
+    for (i = total = 0; i < ntiov; i++)
             total += tiov[i].iov_len;
     
     sysrc = syscall(SYS_writev, c->fd, tiov, ntiov);
-- 
1.8.3.1