git://ftp.safe.ca / safe / jmp / linux-2.6 / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 0bf52b9) | patch
ipw2x00: Write outside array bounds
authorZhu Yi <yi.zhu@intel.com>
Mon, 27 Jul 2009 02:10:20 +0000 (10:10 +0800)
committerJohn W. Linville <linville@tuxdriver.com>
Fri, 7 Aug 2009 17:09:28 +0000 (13:09 -0400)
commit7dd2459d8f7a967bcd1466591aec72bb3ddc07cc
treec07513130a369e62e0ea9fbc6522ade3321700catree | snapshot
parent0bf52b981770cbf006323bab5177f2858a196766commit | diff
ipw2x00: Write outside array bounds

> channel_index loops up to IPW_SCAN_CHANNELS, but is used after being
> incremented. This might be able to access 1 past the end of the array

Reported-by: Roel Kluin <roel.kluin@gmail.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
drivers/net/wireless/ipw2x00/ipw2200.c diff | blob | history
Full containers within linux kernel