aboutsummaryrefslogtreecommitdiffstats
path: root/drivers/net/wireless/ath/ath9k/hif_usb.c
diff options
context:
space:
mode:
authorSujith <Sujith.Manoharan@atheros.com>2010-04-06 05:58:15 -0400
committerJohn W. Linville <linville@tuxdriver.com>2010-04-08 15:24:10 -0400
commitc503269a0f77e9b2d6de9e8a5f66ace53dde6e04 (patch)
treefc525fcf618330b20ff5871659dcd1c59114f8b1 /drivers/net/wireless/ath/ath9k/hif_usb.c
parent66b10e33f742bb45a29b7dbbc8dc85583d4c9ef6 (diff)
ath9k_htc: Fix module unloading issue
The maximum number of packets in a single buffer in stream mode is 10. The driver currently uses 8 - which caused stack corruption, in the absence of any kind of OOB checking. Fixing this to the correct value of 10 fixes the module unload issue. Signed-off-by: Sujith <Sujith.Manoharan@atheros.com> Tested-by: Ming Lei <tom.leiming@gmail.com> Signed-off-by: John W. Linville <linville@tuxdriver.com>
Diffstat (limited to 'drivers/net/wireless/ath/ath9k/hif_usb.c')
-rw-r--r--drivers/net/wireless/ath/ath9k/hif_usb.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/net/wireless/ath/ath9k/hif_usb.c b/drivers/net/wireless/ath/ath9k/hif_usb.c
index 4528df4a5bdc..69bef1de71ae 100644
--- a/drivers/net/wireless/ath/ath9k/hif_usb.c
+++ b/drivers/net/wireless/ath/ath9k/hif_usb.c
@@ -324,7 +324,7 @@ static struct ath9k_htc_hif hif_usb = {
324static void ath9k_hif_usb_rx_stream(struct hif_device_usb *hif_dev, 324static void ath9k_hif_usb_rx_stream(struct hif_device_usb *hif_dev,
325 struct sk_buff *skb) 325 struct sk_buff *skb)
326{ 326{
327 struct sk_buff *nskb, *skb_pool[8]; 327 struct sk_buff *nskb, *skb_pool[MAX_PKT_NUM_IN_TRANSFER];
328 int index = 0, i = 0, chk_idx, len = skb->len; 328 int index = 0, i = 0, chk_idx, len = skb->len;
329 int rx_remain_len = 0, rx_pkt_len = 0; 329 int rx_remain_len = 0, rx_pkt_len = 0;
330 u16 pkt_len, pkt_tag, pool_index = 0; 330 u16 pkt_len, pkt_tag, pool_index = 0;