diff options
| author |   Malcolm Priestley <tvboxspy@gmail.com> | 2014-07-05 19:24:22 +0100 |
|---|---|---|
| committer |   Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2014-07-08 16:03:57 -0700 |
| commit | 89daee6ff54172c147bcbdad60c8b8db141c8d20 (patch) | |
| tree | 668b726302d6339da671244fb4fd296b5a1fd779 /drivers | |
| parent | staging: vt6656: vnt_rf_set_txpower use power for priv->byCurPwr (diff) | |
staging: vt6656: vnt_rf_setpower rate <= RATE_11M check array bound
decrement channel by one and check array bound.
Signed-off-by: Malcolm Priestley <tvboxspy@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers')
| -rw-r--r-- | drivers/staging/vt6656/rf.c | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/drivers/staging/vt6656/rf.c b/drivers/staging/vt6656/rf.c index 971f84480117..4124131fba20 100644 --- a/drivers/staging/vt6656/rf.c +++ b/drivers/staging/vt6656/rf.c @@ -744,7 +744,10 @@ int vnt_rf_setpower(struct vnt_private *priv, u32 rate, u32 channel) case RATE_2M: case RATE_5M: case RATE_11M: - power = priv->abyCCKPwrTbl[channel-1]; + channel--; + + if (channel < sizeof(priv->abyCCKPwrTbl)) + power = priv->abyCCKPwrTbl[channel]; break; case RATE_6M: case RATE_9M: |