commit 4c92831d99827971cf2854cfa7f884213099428f
author Dan Carpenter <error27@gmail.com> Sat Jul 10 10:53:38 2010 +0200
committer John W. Linville <linville@tuxdriver.com> Mon Jul 12 16:05:32 2010 -0400
tree fafce6b1a9c082952a91659d18e7f7d5970dd45c
parent 72e93e9161a917017f6c3cac216d813088ec2d1f

prism54: call BUG_ON() earlier

This test is off by one because strlen() doesn't include the NULL
terminator.

Signed-off-by: Dan Carpenter <error27@gmail.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>

drivers/net/wireless/prism54/isl_ioctl.c

diff --git a/drivers/net/wireless/prism54/isl_ioctl.c b/drivers/net/wireless/prism54/isl_ioctl.c
index 236e375..2e656bb 100644
--- a/drivers/net/wireless/prism54/isl_ioctl.c
+++ b/drivers/net/wireless/prism54/isl_ioctl.c
@@ -2067,7 +2067,7 @@
 	memptr = kmalloc(IW_CUSTOM_MAX, GFP_KERNEL);
 	if (!memptr)
 		return;
-	BUG_ON(n > IW_CUSTOM_MAX);
+	BUG_ON(n >= IW_CUSTOM_MAX);
 	wrqu.data.pointer = memptr;
 	wrqu.data.length = n;
 	strcpy(memptr, str);