From 4bc7deee9095f21e243b724ca3d634251c1d5432 Mon Sep 17 00:00:00 2001 From: David Gibson Date: Wed, 29 Oct 2008 23:27:45 -0500 Subject: libfdt: Fix bug in fdt_subnode_offset_namelen() There's currently an off-by-one bug in fdt_subnode_offset_namelen() which causes it to keep searching after it's finished the subnodes of the given parent, and into the subnodes of siblings of the original node which come after it in the tree. Signed-off-by: David Gibson Signed-off-by: Kumar Gala --- libfdt/fdt_ro.c | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) (limited to 'libfdt') diff --git a/libfdt/fdt_ro.c b/libfdt/fdt_ro.c index b705f91ec..fdc9c29d2 100644 --- a/libfdt/fdt_ro.c +++ b/libfdt/fdt_ro.c @@ -112,12 +112,12 @@ int fdt_num_mem_rsv(const void *fdt) int fdt_subnode_offset_namelen(const void *fdt, int offset, const char *name, int namelen) { - int depth; + int depth = 0; FDT_CHECK_HEADER(fdt); - for (depth = 0; - offset >= 0; + for (depth = 0, offset = fdt_next_node(fdt, offset, &depth); + (offset >= 0) && (depth > 0); offset = fdt_next_node(fdt, offset, &depth)) { if (depth < 0) return -FDT_ERR_NOTFOUND; @@ -126,7 +126,10 @@ int fdt_subnode_offset_namelen(const void *fdt, int offset, return offset; } - return offset; /* error */ + if (offset < 0) + return offset; /* error */ + else + return -FDT_ERR_NOTFOUND; } int fdt_subnode_offset(const void *fdt, int parentoffset, -- cgit v1.2.3