lk/linux-kernel-test
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

p54: Write outside array bounds

Browse Source 
This patch fixes a coding error which allowed the to upper-layer to
corrupt limited portions of the phy data.

Signed-off-by: Christian Lamparter <chunkeey@web.de>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
This commit is contained in:
Christian Lamparter
2009-08-07 19:38:51 +02:00
committed by John W. Linville
parent 66d2d089c3
commit 718126a75e
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
drivers/net/wireless/p54/main.c
View File

@@ -317,7 +317,7 @@ static int p54_conf_tx(struct ieee80211_hw *dev, u16 queue,
int ret; int ret;
mutex_lock(&priv->conf_mutex); mutex_lock(&priv->conf_mutex);
if ((params) && !(queue > 4)) { if (queue < dev->queues) {
P54_SET_QUEUE(priv->qos_params[queue], params->aifs, P54_SET_QUEUE(priv->qos_params[queue], params->aifs,
params->cw_min, params->cw_max, params->txop); params->cw_min, params->cw_max, params->txop);
ret = p54_set_edcf(priv); ret = p54_set_edcf(priv);