diff options
| author | Dan Carpenter <error27@gmail.com> | 2010-05-08 12:24:02 -0400 |
|---|---|---|
| committer | John W. Linville <linville@tuxdriver.com> | 2010-05-10 14:56:47 -0400 |
| commit | 0730d114194364d078dbd0cfce708e8c67dccdfb (patch) | |
| tree | 5f822d3e6970f3fb999ccd10dccf61d46354e974 /drivers/net/wireless | |
| parent | 277a64d17ee819161242ce3059a9c2d0f8dfd29c (diff) | |
ath9k/htc_drv_main: off by one error
I changed "> ATH9K_HTC_MAX_TID" to ">= ATH9K_HTC_MAX_TID" to avoid a
potential overflow.
Signed-off-by: Dan Carpenter <error27@gmail.com>
Acked-by: Sujith <Sujith.Manoharan@atheros.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Diffstat (limited to 'drivers/net/wireless')
| -rw-r--r-- | drivers/net/wireless/ath/ath9k/htc_drv_main.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/net/wireless/ath/ath9k/htc_drv_main.c b/drivers/net/wireless/ath/ath9k/htc_drv_main.c index e75db06e8087..6c386dad1d40 100644 --- a/drivers/net/wireless/ath/ath9k/htc_drv_main.c +++ b/drivers/net/wireless/ath/ath9k/htc_drv_main.c | |||
| @@ -465,7 +465,7 @@ static int ath9k_htc_aggr_oper(struct ath9k_htc_priv *priv, | |||
| 465 | int ret = 0; | 465 | int ret = 0; |
| 466 | u8 cmd_rsp; | 466 | u8 cmd_rsp; |
| 467 | 467 | ||
| 468 | if (tid > ATH9K_HTC_MAX_TID) | 468 | if (tid >= ATH9K_HTC_MAX_TID) |
| 469 | return -EINVAL; | 469 | return -EINVAL; |
| 470 | 470 | ||
| 471 | memset(&aggr, 0, sizeof(struct ath9k_htc_target_aggr)); | 471 | memset(&aggr, 0, sizeof(struct ath9k_htc_target_aggr)); |