--- /dev/null
+From linux-kernel-owner+chrisw=40osdl.org-S1030193AbVIAPWg@vger.kernel.org Thu Sep 1 08:23:18 2005
+Subject: [PATCH] aacraid: 2.6.13 aacraid bad BUG_ON fix
+From: Mark Haverkamp <markh@osdl.org>
+To: James Bottomley <James.Bottomley@steeleye.com>,
+ Andrew Morton <akpm@osdl.org>
+Cc: linux-scsi <linux-scsi@vger.kernel.org>,
+ linux-kernel <linux-kernel@vger.kernel.org>,
+ Mark Salyzyn <mark_salyzyn@adaptec.com>
+Date: Thu, 01 Sep 2005 08:19:23 -0700
+
+This was noticed by Doug Bazamic and the fix found by Mark Salyzyn at
+Adaptec.
+
+There was an error in the BUG_ON() statement that validated the
+calculated fib size which can cause the driver to panic.
+
+Signed-off-by: Mark Haverkamp <markh@osdl.org>
+Acked-by: James Bottomley <James.Bottomley@SteelEye.com>
+Signed-off-by: Chris Wright <chrisw@osdl.org>
+---
+
+--- a/drivers/scsi/aacraid/aachba.c 2005-08-28 19:41:01.000000000 -0400
++++ b/drivers/scsi/aacraid/aachba.c 2005-09-01 08:05:29.118304656 -0400
+@@ -968,7 +968,7 @@
+ fibsize = sizeof(struct aac_read64) +
+ ((le32_to_cpu(readcmd->sg.count) - 1) *
+ sizeof (struct sgentry64));
+- BUG_ON (fibsize > (sizeof(struct hw_fib) -
++ BUG_ON (fibsize > (dev->max_fib_size -
+ sizeof(struct aac_fibhdr)));
+ /*
+ * Now send the Fib to the adapter
+