]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ee61711) | patch
iwlwifi: Read outside array bounds
authorRoel Kluin <roel.kluin@gmail.com>
Sat, 25 Jul 2009 21:34:31 +0000 (23:34 +0200)
committerJohn W. Linville <linville@tuxdriver.com>
Mon, 27 Jul 2009 19:19:37 +0000 (15:19 -0400)
commitad5f70ec5fbc9bf4d7ee41d000d5f759b6db8abd
tree71fcce74adf2a0c53057942eedbb15bf24b96e9etree | snapshot
parentee617118989f4eb0ae6ced99a94aadf8c40b07c4commit | diff
iwlwifi: Read outside array bounds

tid is bounded (above) by the size of default_tid_to_tx_fifo (17 elements), but
the size of priv->stations[].tid[] is MAX_TID_COUNT (9) elements.

Signed-off-by: Roel Kluin <roel.kluin@gmail.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
drivers/net/wireless/iwlwifi/iwl-tx.c diff | blob | history
Linux Kernel Source Tree.