diff options
| author |   Andrzej Hajda <a.hajda@samsung.com> | 2015-09-21 15:33:53 +0200 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2015-09-22 16:14:32 -0700 |
| commit | cc7514985919238ef7ce94e80f0d0ad87193de47 (patch) | |
| tree | 27a735aefb700ee880bc7520e9cf5bb6db9ee674 /drivers/net/wireless | |
| parent | net: brcm80211: fix range check (diff) | |
| download | linux-dev-cc7514985919238ef7ce94e80f0d0ad87193de47.tar.xz linux-dev-cc7514985919238ef7ce94e80f0d0ad87193de47.zip | |
mwifiex: fix comparison expression
To avoid underflows signed variables should be used in expression.
The problem has been detected using proposed semantic patch
scripts/coccinelle/tests/unsigned_lesser_than_zero.cocci [1].
[1]: http://permalink.gmane.org/gmane.linux.kernel/2038576
Signed-off-by: Andrzej Hajda <a.hajda@samsung.com>
Acked-by: Amitkumar Karwar <akarwar@marvell.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'drivers/net/wireless')
| -rw-r--r-- | drivers/net/wireless/mwifiex/11n_rxreorder.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/drivers/net/wireless/mwifiex/11n_rxreorder.c b/drivers/net/wireless/mwifiex/11n_rxreorder.c index 2906cd543532..b3970a8c9e48 100644 --- a/drivers/net/wireless/mwifiex/11n_rxreorder.c +++ b/drivers/net/wireless/mwifiex/11n_rxreorder.c @@ -615,10 +615,10 @@ int mwifiex_11n_rx_reorder_pkt(struct mwifiex_private *priv, ((end_win > start_win) && ((seq_num > end_win) || (seq_num < start_win)))) { end_win = seq_num; - if (((seq_num - win_size) + 1) >= 0) + if (((end_win - win_size) + 1) >= 0) start_win = (end_win - win_size) + 1; else - start_win = (MAX_TID_VALUE - (win_size - seq_num)) + 1; + start_win = (MAX_TID_VALUE - (win_size - end_win)) + 1; mwifiex_11n_dispatch_pkt_until_start_win(priv, tbl, start_win); } |