diff options
| author | Felix Fietkau <[email protected]> | 2014-11-18 21:35:31 +0000 |
|---|---|---|
| committer | Johannes Berg <[email protected]> | 2014-11-18 21:39:16 +0000 |
| commit | 280ba51d60be6f4ca3347eaa60783314f38df72e (patch) | |
| tree | 4b6f66ce8187b59e755f02f14ffd5d488b6084df /drivers/net/xen-netback/interface.c | |
| parent | mac80211: Fix regression that triggers a kernel BUG with CCMP (diff) | |
| download | kernel-280ba51d60be6f4ca3347eaa60783314f38df72e.tar.gz kernel-280ba51d60be6f4ca3347eaa60783314f38df72e.zip | |
mac80211: minstrel_ht: fix a crash in rate sorting
The commit 5935839ad73583781b8bbe8d91412f6826e218a4
"mac80211: improve minstrel_ht rate sorting by throughput & probability"
introduced a crash on rate sorting that occurs when the rate added to
the sorting array is faster than all the previous rates. Due to an
off-by-one error, it reads the rate index from tp_list[-1], which
contains uninitialized stack garbage, and then uses the resulting index
for accessing the group rate stats, leading to a crash if the garbage
value is big enough.
Cc: Thomas Huehn <[email protected]>
Reported-by: Jouni Malinen <[email protected]>
Signed-off-by: Felix Fietkau <[email protected]>
Signed-off-by: Johannes Berg <[email protected]>
Diffstat (limited to 'drivers/net/xen-netback/interface.c')
0 files changed, 0 insertions, 0 deletions