| commit | 082e708acc50a5b625b9bde0bb1af90dfdbd1942 | [log] [tgz] |
|---|---|---|
| author | Roel Kluin <roel.kluin@gmail.com> | Sat Jul 25 23:34:31 2009 +0200 |
| committer | John W. Linville <linville@tuxdriver.com> | Mon Jul 27 15:19:37 2009 -0400 |
| tree | 71fcce74adf2a0c53057942eedbb15bf24b96e9e | |
| parent | 008749fc9917b799c469478141ddd1a4c81d06ca [diff] |
iwlwifi: Read outside array bounds tid is bounded (above) by the size of default_tid_to_tx_fifo (17 elements), but the size of priv->stations[].tid[] is MAX_TID_COUNT (9) elements. Signed-off-by: Roel Kluin <roel.kluin@gmail.com> Signed-off-by: John W. Linville <linville@tuxdriver.com>