In the loop, when the index of array "vsi->rss_key" is equal
to "vsi->rss_key_size", the array will be out of bounds.

Fixes: 50370662b727 ("net/ice: support device and queue ops")

Signed-off-by: Wang Jie <jie1x.w...@intel.com>
---
 drivers/net/ice/ice_ethdev.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/drivers/net/ice/ice_ethdev.c b/drivers/net/ice/ice_ethdev.c
index 3e60acc01a..65efb3e966 100644
--- a/drivers/net/ice/ice_ethdev.c
+++ b/drivers/net/ice/ice_ethdev.c
@@ -3034,7 +3034,7 @@ static int ice_init_rss(struct ice_pf *pf)
        /* configure RSS key */
        if (!rss_conf->rss_key) {
                /* Calculate the default hash key */
-               for (i = 0; i <= vsi->rss_key_size; i++)
+               for (i = 0; i < vsi->rss_key_size; i++)
                        vsi->rss_key[i] = (uint8_t)rte_rand();
        } else {
                rte_memcpy(vsi->rss_key, rss_conf->rss_key,
-- 
2.17.1

Reply via email to