diff --git a/net/ceph/osdmap.c b/net/ceph/osdmap.c index bb8a0b973edc..306cf13318ea 100644 --- a/net/ceph/osdmap.c +++ b/net/ceph/osdmap.c @@ -503,6 +503,8 @@ static struct crush_map *crush_decode(void *pbyval, void *end) ceph_decode_need(p, end, 4*sizeof(u32), bad); b->id = ceph_decode_32(p); + if (b->id != -1 - i) + goto bad; b->type = ceph_decode_16(p); if (b->type == 0) goto bad;