Bug 10588 - [net/wireless/wavelan.c:913]: Array index out of bounds
Summary: [net/wireless/wavelan.c:913]: Array index out of bounds
Status: CLOSED CODE_FIX
Alias: None
Product: Drivers
Classification: Unclassified
Component: network-wireless (show other bugs)
Hardware: All Linux
: P1 normal
Assignee: John W. Linville
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2008-05-01 23:30 UTC by Daniel Marjamäki
Modified: 2008-05-14 13:52 UTC (History)
1 user (show)

See Also:
Kernel Version: 2.6.25.1
Subsystem:
Regression: ---
Bisected commit-id:


Attachments
wavelan-array-overflow.patch (1.46 KB, patch)
2008-05-02 06:53 UTC, John W. Linville
Details | Diff

Description Daniel Marjamäki 2008-05-01 23:30:31 UTC
Array index is out of bounds for p->psa_reserved[2] and p->psa_reserved[3].

The psa_reserved array only has 2 elements.
Comment 1 John W. Linville 2008-05-02 06:34:31 UTC
Ah, thanks!
Comment 2 John W. Linville 2008-05-02 06:53:23 UTC
Created attachment 16008 [details]
wavelan-array-overflow.patch
Comment 3 Adrian Bunk 2008-05-14 13:52:48 UTC
fixed by commit d5251aea1539ec89dd567e75169c568b5243b6fa

Note You need to log in before you can comment on or make changes to this bug.