leandrof/linux
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

ath9k: Fix read buffer overflow

Browse Source 
Prevent a read of powInfo[-1] in the first iteration.

Signed-off-by: Roel Kluin <roel.kluin@gmail.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
This commit is contained in:
Roel Kluin 2009-08-07 23:50:00 +02:00 committed by John W. Linville
parent 5bf6fcc2bb
commit 73f57f8398
1 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
drivers/net/wireless/ath/ath9k/eeprom.c
View File

@ -143,10 +143,10 @@ void ath9k_hw_get_legacy_target_powers(struct ath_hw *ah,
IS_CHAN_2GHZ(chan))) { IS_CHAN_2GHZ(chan))) {
matchIndex = i; matchIndex = i;
break; break;
} else if ((freq < ath9k_hw_fbin2freq(powInfo[i].bChannel, } else if (freq < ath9k_hw_fbin2freq(powInfo[i].bChannel,
IS_CHAN_2GHZ(chan))) && IS_CHAN_2GHZ(chan)) && i > 0 &&
(freq > ath9k_hw_fbin2freq(powInfo[i - 1].bChannel, freq > ath9k_hw_fbin2freq(powInfo[i - 1].bChannel,
IS_CHAN_2GHZ(chan)))) { IS_CHAN_2GHZ(chan))) {
lowIndex = i - 1; lowIndex = i - 1;
break; break;
} }
@ -198,10 +198,10 @@ void ath9k_hw_get_target_powers(struct ath_hw *ah,
matchIndex = i; matchIndex = i;
break; break;
} else } else
if ((freq < ath9k_hw_fbin2freq(powInfo[i].bChannel, if (freq < ath9k_hw_fbin2freq(powInfo[i].bChannel,
IS_CHAN_2GHZ(chan))) && IS_CHAN_2GHZ(chan)) && i > 0 &&
(freq > ath9k_hw_fbin2freq(powInfo[i - 1].bChannel, freq > ath9k_hw_fbin2freq(powInfo[i - 1].bChannel,
IS_CHAN_2GHZ(chan)))) { IS_CHAN_2GHZ(chan))) {
lowIndex = i - 1; lowIndex = i - 1;
break; break;
} }