Commit b7dcf68f authored Apr 06, 2017 by Dan Carpenter Committed by Kalle Valo Apr 19, 2017

ath9k: off by one in ath9k_hw_nvram_read_array()

The > should be >= or we read one space beyond the end of the array.

Fixes: ab5c4f71 ("ath9k: allow to load EEPROM content via firmware API")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Kalle Valo <kvalo@qca.qualcomm.com>

parent 3161addd

drivers/net/wireless/ath/ath9k/eeprom.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -112,7 +112,7 @@ void ath9k_hw_usb_gen_fill_eeprom(struct ath_hw ah, u16 eep_data,
		static bool ath9k_hw_nvram_read_array(u16 *blob, size_t blob_size,
		off_t offset, u16 *data)
		{
		if (offset > blob_size)
		if (offset >= blob_size)
		return false;

		*data = blob[offset];