diff options
| author | Roel Kluin <[email protected]> | 2009-07-25 23:34:31 +0200 |
|---|---|---|
| committer | John W. Linville <[email protected]> | 2009-07-27 15:19:37 -0400 |
| commit | 082e708acc50a5b625b9bde0bb1af90dfdbd1942 (patch) | |
| tree | 71fcce74adf2a0c53057942eedbb15bf24b96e9e /net/lapb/lapb_iface.c | |
| parent | 008749fc9917b799c469478141ddd1a4c81d06ca (diff) | |
iwlwifi: Read outside array bounds
tid is bounded (above) by the size of default_tid_to_tx_fifo (17 elements), but
the size of priv->stations[].tid[] is MAX_TID_COUNT (9) elements.
Signed-off-by: Roel Kluin <[email protected]>
Signed-off-by: John W. Linville <[email protected]>
Diffstat (limited to 'net/lapb/lapb_iface.c')
0 files changed, 0 insertions, 0 deletions