Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 30c4ae42 authored by Michael Buesch's avatar Michael Buesch Committed by Jeff Garzik
Browse files

b43: debugfs SHM read buffer overrun fix 



Fix possible buffer overrun.

Signed-off-by: default avatarMichael Buesch <mb@bu3sch.de>
Signed-off-by: default avatarJohn W. Linville <linville@tuxdriver.com>
parent 80fda03f

drivers/net/wireless/b43/debugfs.c

+1 −1
Original line number Diff line number Diff line
@@ -128,7 +128,7 @@ static ssize_t shm_read_file(struct b43_wldev *dev, 
	__le16 *le16buf = (__le16 *)buf;



	for (i = 0; i < 0x1000; i++) {

		if (bufsize <= 0)

		if (bufsize < sizeof(tmp))

			break;

		tmp = b43_shm_read16(dev, B43_SHM_SHARED, 2 * i);

		le16buf[i] = cpu_to_le16(tmp);