summaryrefslogtreecommitdiffstats
path: root/drivers/net/wireless/iwlwifi/iwl-agn.c
diff options
context:
space:
mode:
authorReinette Chatre <reinette.chatre@intel.com>2010-02-26 11:01:36 -0800
committerReinette Chatre <reinette.chatre@intel.com>2010-03-09 16:15:33 -0800
commit1d79e53c56afe0826a311c3bc1653ad938166c22 (patch)
tree99ea9db960129d1d30c3960f9375a25379e9c9a9 /drivers/net/wireless/iwlwifi/iwl-agn.c
parentd88dca79d3852a3623f606f781e013d61486828a (diff)
downloadtalos-op-linux-1d79e53c56afe0826a311c3bc1653ad938166c22.tar.gz
talos-op-linux-1d79e53c56afe0826a311c3bc1653ad938166c22.zip
iwl3945: fix memory corruption
Recent patch "iwlwifi: move 3945 clip groups to 3945 data" exposed a memory corruption problem. When initializing the clip groups the code was mistakenly using the iwlagn rate count, not the 3945 rate count. This resulted in more memory being written than was allocated. "iwlwifi: move 3945 clip groups to 3945 data" moved the location where the clip groups are stored and the impact is now severe in that the number of configured TX queues is modified. Previously the "temperature" field was overwritten, which did not seem to affect the operation. Fix this one instance where wrong rate count was used. I also noticed one more location where the iwlagn rate count was used to index an iwl3945 array, fix this. I also modified one location that modified the iwlagn rate count to obtain the iwl3945 rate count ... just use the iwl3945 rate count directly. This fixes http://bugzilla.intellinuxwireless.org/show_bug.cgi?id=2165 and http://bugzilla.intellinuxwireless.org/show_bug.cgi?id=2168 Signed-off-by: Reinette Chatre <reinette.chatre@intel.com>
Diffstat (limited to 'drivers/net/wireless/iwlwifi/iwl-agn.c')
0 files changed, 0 insertions, 0 deletions
OpenPOWER on IntegriCloud