linux/drivers/net/wireless/brcm80211
Dan Carpenter 3e4f319dac brcmfmac: fix end of loop check (signedness bug)
The problem here is that we loop until "remained_buf_len" is less than
zero, but since it is unsigned, it never is.

"remained_buf_len" has to be large enough to hold the value from
"mgmt_ie_buf_len".  That variable is type u32, but it only holds small
values so I have changed to both variables to int.

Also I removed the bogus initialization from "mgmt_ie_buf_len" so that
GCC can detect if it is used unitialized.  I moved the declaration of
"remained_buf_len" closer to where it is used so it's easier to read.

Reviewed-by: Pieter-Paul Giesberts <pieterpg@broadcom.com>
Reviewed-by: Hante Meuleman <meuleman@broadcom.com>
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Franky Lin <frankyl@broadcom.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
2012-10-15 14:45:34 -04:00
..
brcmfmac brcmfmac: fix end of loop check (signedness bug) 2012-10-15 14:45:34 -04:00
brcmsmac Merge branch 'for-davem' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next 2012-09-30 02:30:16 -04:00
brcmutil brcm80211: brcmu_pkt_buf_free_skb() should handle NULL 2012-06-05 15:23:20 -04:00
include brcmfmac: add BCM43241 sdio interface driver support 2012-09-07 15:03:43 -04:00
Kconfig brcmfmac: add e-scan support. 2012-09-12 14:19:16 -04:00
Makefile brcm80211: Use normal DEBUG define 2012-01-24 14:21:13 -05:00