b43: Fix tim search buffer overrun
authorMichael Buesch <mb@bu3sch.de>
Thu, 27 Dec 2007 21:15:11 +0000 (22:15 +0100)
committerDavid S. Miller <davem@davemloft.net>
Mon, 28 Jan 2008 23:09:46 +0000 (15:09 -0800)
commit47f76ca3a34cd6571a2de39da2926123ca39a4c1
treef9924200068ff173a23f811b3dcee565a3fccbea
parent280d0e16bcbf5893505a0d0897f3ca1ddc0764fa
b43: Fix tim search buffer overrun

Use the length of the variable section of the beacon instead of the
whole beacon length for bounds checking.

Signed-off-by: Michael Buesch <mb@bu3sch.de>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
drivers/net/wireless/b43/main.c