diff options
| author | Amitkumar Karwar <akarwar@marvell.com> | 2013-10-23 02:24:45 +0400 |
|---|---|---|
| committer | John W. Linville <linville@tuxdriver.com> | 2013-11-11 23:38:57 +0400 |
| commit | 2636c308fd720137d719c91da95adca2cd8f1c51 (patch) | |
| tree | bf60abf98eb45eb883656e2add8bee7acd989dfc /virt/kvm/eventfd.c | |
| parent | fe1c9a443e0d1e0af790883f091fb1c4f418bc8f (diff) | |
| download | linux-2636c308fd720137d719c91da95adca2cd8f1c51.tar.xz | |
mwifiex: fix invalid memory access in mwifiex_ret_tx_rate_cfg()
As tlv_buf_len is decremented at the end of the loop, we may have
accessed invalid memory in the last iteration.
Modify the while condition and add a break statement at the
begining of the loop to fix the problem.
Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Amitkumar Karwar <akarwar@marvell.com>
Signed-off-by: Bing Zhao <bzhao@marvell.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Diffstat (limited to 'virt/kvm/eventfd.c')
0 files changed, 0 insertions, 0 deletions