Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 5f0fabf8 authored by Bing Zhao's avatar Bing Zhao Committed by John W. Linville
Browse files

mwifiex: fix potential out-of-boundary access to ibss rate table 



smatch found this error:

CHECK   drivers/net/wireless/mwifiex/join.c
  drivers/net/wireless/mwifiex/join.c:1121
  mwifiex_cmd_802_11_ad_hoc_join()
  error: testing array offset 'i' after use.

Cc: <stable@vger.kernel.org> # 3.0+
Signed-off-by: default avatarBing Zhao <bzhao@marvell.com>
Signed-off-by: default avatarJohn W. Linville <linville@tuxdriver.com>
parent 930df2df

drivers/net/wireless/mwifiex/join.c

+3 −4
Original line number Diff line number Diff line
@@ -1117,9 +1117,8 @@ mwifiex_cmd_802_11_ad_hoc_join(struct mwifiex_private *priv, 
		adhoc_join->bss_descriptor.bssid,

		adhoc_join->bss_descriptor.ssid);



	for (i = 0; bss_desc->supported_rates[i] &&

			i < MWIFIEX_SUPPORTED_RATES;

			i++)

	for (i = 0; i < MWIFIEX_SUPPORTED_RATES &&

		    bss_desc->supported_rates[i]; i++)

		;

	rates_size = i;