[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <1269879231.2446.3410.camel@rchatre-DESK>
Date: Mon, 29 Mar 2010 09:13:51 -0700
From: reinette chatre <reinette.chatre@...el.com>
To: "Zhu, Yi" <yi.zhu@...el.com>
Cc: Dan Carpenter <error27@...il.com>,
Intel Linux Wireless <ilw@...ux.intel.com>,
"John W. Linville" <linville@...driver.com>,
"Kolekar, Abhijeet" <abhijeet.kolekar@...el.com>,
"Berg, Johannes" <johannes.berg@...el.com>,
"Guy, Wey-Yi W" <wey-yi.w.guy@...el.com>,
"linux-wireless@...r.kernel.org" <linux-wireless@...r.kernel.org>,
"netdev@...r.kernel.org" <netdev@...r.kernel.org>,
"linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>,
"kernel-janitors@...r.kernel.org" <kernel-janitors@...r.kernel.org>
Subject: Re: [patch] iwlwifi: range checking issue
On Sun, 2010-03-28 at 19:01 -0700, Zhu, Yi wrote:
> On Sun, 2010-03-28 at 19:55 +0800, Dan Carpenter wrote:
> > IWL_RATE_COUNT is 13 and IWL_RATE_COUNT_LEGACY is 12.
> >
> > IWL_RATE_COUNT_LEGACY is the right one here because iwl3945_rates
> > doesn't support 60M and also that's how "rates" is defined in
> > iwlcore_init_geos() from drivers/net/wireless/iwlwifi/iwl-core.c.
> >
> > rates = kzalloc((sizeof(struct ieee80211_rate) * IWL_RATE_COUNT_LEGACY),
> > GFP_KERNEL);
> >
> > Signed-off-by: Dan Carpenter <error27@...il.com>
>
> Acked-by: Zhu Yi <yi.zhu@...el.com>
Great catch. Since this is a fix for a buffer overflow ... could you
please pass it on to stable also?
Thank you
Reinette
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists