Commit 0730d114 authored by Dan Carpenter's avatar Dan Carpenter Committed by John W. Linville

ath9k/htc_drv_main: off by one error

I changed "> ATH9K_HTC_MAX_TID" to ">= ATH9K_HTC_MAX_TID" to avoid a
potential overflow.
Signed-off-by: default avatarDan Carpenter <error27@gmail.com>
Acked-by: default avatarSujith <Sujith.Manoharan@atheros.com>
Signed-off-by: default avatarJohn W. Linville <linville@tuxdriver.com>
parent 277a64d1
...@@ -465,7 +465,7 @@ static int ath9k_htc_aggr_oper(struct ath9k_htc_priv *priv, ...@@ -465,7 +465,7 @@ static int ath9k_htc_aggr_oper(struct ath9k_htc_priv *priv,
int ret = 0; int ret = 0;
u8 cmd_rsp; u8 cmd_rsp;
if (tid > ATH9K_HTC_MAX_TID) if (tid >= ATH9K_HTC_MAX_TID)
return -EINVAL; return -EINVAL;
memset(&aggr, 0, sizeof(struct ath9k_htc_target_aggr)); memset(&aggr, 0, sizeof(struct ath9k_htc_target_aggr));
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment