--- /dev/null
+Commit-Id: 3298a7388c00227e736d1037328788073c80c7b4
+From: Michael Chan <mchan@broadcom.com>
+Date: Wed, 17 Dec 2008 19:06:08 -0800
+Acked-by: Karsten Keil <kkeil@novell.com>
+Subject: [PATCH] bnx2: Fix bug in bnx2_free_rx_mem().
+
+DMA memory for the jumbo rx page rings was freed incorrectly using the
+wrong local variable as the array index.
+
+Signed-off-by: Michael Chan <mchan@broadcom.com>
+Signed-off-by: David S. Miller <davem@davemloft.net>
+
+---
+ drivers/net/bnx2.c | 6 +++---
+ 1 file changed, 3 insertions(+), 3 deletions(-)
+
+--- a/drivers/net/bnx2.c
++++ b/drivers/net/bnx2.c
+@@ -547,9 +547,9 @@ bnx2_free_rx_mem(struct bnx2 *bp)
+ for (j = 0; j < bp->rx_max_pg_ring; j++) {
+ if (rxr->rx_pg_desc_ring[j])
+ pci_free_consistent(bp->pdev, RXBD_RING_SIZE,
+- rxr->rx_pg_desc_ring[i],
+- rxr->rx_pg_desc_mapping[i]);
+- rxr->rx_pg_desc_ring[i] = NULL;
++ rxr->rx_pg_desc_ring[j],
++ rxr->rx_pg_desc_mapping[j]);
++ rxr->rx_pg_desc_ring[j] = NULL;
+ }
+ if (rxr->rx_pg_ring)
+ vfree(rxr->rx_pg_ring);