Commit 718126a7 authored Aug 07, 2009 by Christian Lamparter Committed by John W. Linville Aug 14, 2009

p54: Write outside array bounds



This patch fixes a coding error which allowed the to upper-layer to
corrupt limited portions of the phy data.

Signed-off-by: Christian Lamparter <chunkeey@web.de>
Signed-off-by: John W. Linville <linville@tuxdriver.com>

parent 66d2d089

drivers/net/wireless/p54/main.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -317,7 +317,7 @@ static int p54_conf_tx(struct ieee80211_hw *dev, u16 queue,
		int ret;

		mutex_lock(&priv->conf_mutex);
		if ((params) && !(queue > 4)) {
		if (queue < dev->queues) {
		P54_SET_QUEUE(priv->qos_params[queue], params->aifs,
		params->cw_min, params->cw_max, params->txop);
		ret = p54_set_edcf(priv);