| commit | c2f2d3a06f8b628d444cf4f396d6c6ddd47e1d1f | |
| author | Johannes Berg <johannes@sipsolutions.net> | |
| Fri, 29 Feb 2008 22:28:25 +0000 (29 23:28 +0100) | ||
| committer | John W. Linville <linville@tuxdriver.com> | |
| Tue, 4 Mar 2008 23:36:36 +0000 (4 18:36 -0500) | ||
| tree | 7879c02aa491f6e335dd907b1093941bfb892215 | treesnapshot (tar.gz zip) |
| parent | 8c28293f5514f64ba064bac7946aebeda4a663c6 | commitdiff |
p54: fix eeprom parser length sanity checks
When I called p54_parse_eeprom() on a hand-coded structure
I managed to make a small mistake with wrap->len which caused
a segfault a few lines down when trying to read entry->len.
This patch changes the validation code to avoid such problems.
Signed-off-by: Johannes Berg <johannes@sipsolutions.net>
Tested-by: Florian Fainelli <florian.fainelli@telecomint.eu>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
When I called p54_parse_eeprom() on a hand-coded structure
I managed to make a small mistake with wrap->len which caused
a segfault a few lines down when trying to read entry->len.
This patch changes the validation code to avoid such problems.
Signed-off-by: Johannes Berg <johannes@sipsolutions.net>
Tested-by: Florian Fainelli <florian.fainelli@telecomint.eu>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
| drivers/net/wireless/p54common.c | diffblobblamehistory |