diff options
author | Dan Carpenter <dan.carpenter@oracle.com> | 2012-10-11 02:54:05 -0400 |
---|---|---|
committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2012-10-22 16:26:40 -0400 |
commit | ff4573a7afc53ccf6c66622b884d60208d04db2b (patch) | |
tree | 701d73a7311efedf5278b270ddc5ca7e7722a28f /drivers/staging/vt6655/rxtx.c | |
parent | f20fbdf829c11c3c29ee94c0c10ec6195ac4c362 (diff) |
Staging: vt6655-6: shift wrap buf in s_vFillTxKey()
byKeyIndex is an unsigned char between 0 and 0xf. If it is any value
higher than 1, then we will hit an integer wrap issue here.
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/staging/vt6655/rxtx.c')
-rw-r--r-- | drivers/staging/vt6655/rxtx.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/staging/vt6655/rxtx.c b/drivers/staging/vt6655/rxtx.c index 4972e57845c..875ee444238 100644 --- a/drivers/staging/vt6655/rxtx.c +++ b/drivers/staging/vt6655/rxtx.c | |||
@@ -242,7 +242,7 @@ s_vFillTxKey ( | |||
242 | } | 242 | } |
243 | // Append IV after Mac Header | 243 | // Append IV after Mac Header |
244 | *pdwIV &= WEP_IV_MASK;//00000000 11111111 11111111 11111111 | 244 | *pdwIV &= WEP_IV_MASK;//00000000 11111111 11111111 11111111 |
245 | *pdwIV |= (byKeyIndex << 30); | 245 | *pdwIV |= (unsigned long)byKeyIndex << 30; |
246 | *pdwIV = cpu_to_le32(*pdwIV); | 246 | *pdwIV = cpu_to_le32(*pdwIV); |
247 | pDevice->dwIVCounter++; | 247 | pDevice->dwIVCounter++; |
248 | if (pDevice->dwIVCounter > WEP_IV_MASK) { | 248 | if (pDevice->dwIVCounter > WEP_IV_MASK) { |