10588 – [net/wireless/wavelan.c:913]: Array index out of bounds

Bug 10588 - [net/wireless/wavelan.c:913]: Array index out of bounds

Summary: [net/wireless/wavelan.c:913]: Array index out of bounds

Status:	CLOSED CODE_FIX

Alias:	None

Product:	Drivers
Classification:	Unclassified
Component:	network-wireless (show other bugs)
Hardware:	All Linux

Importance:	P1 normal
Assignee:	John W. Linville

URL:
Keywords:

Depends on:
Blocks:

Attachments
wavelan-array-overflow.patch (1.46 KB, patch) 2008-05-02 06:53 UTC, John W. Linville	Details \| Diff
Add an attachment (proposed patch, testcase, etc.)

Description Daniel Marjamäki 2008-05-01 23:30:31 UTC

Array index is out of bounds for p->psa_reserved[2] and p->psa_reserved[3].

The psa_reserved array only has 2 elements.

Comment 1 John W. Linville 2008-05-02 06:34:31 UTC

Ah, thanks!

Comment 2 John W. Linville 2008-05-02 06:53:23 UTC

Created attachment 16008 [details]
wavelan-array-overflow.patch

Comment 3 Adrian Bunk 2008-05-14 13:52:48 UTC

fixed by commit d5251aea1539ec89dd567e75169c568b5243b6fa

Note You need to log in before you can comment on or make changes to this bug.