madwifi: fix an array overrun in the rate control attach check

[openwrt/svn-archive/archive.git] / package / madwifi / patches / 105-ratectl_attach.patch

diff --git a/package/madwifi/patches/105-ratectl_attach.patch b/package/madwifi/patches/105-ratectl_attach.patch
index 1303acfb0d9c250c2752b063f9f21530c5e09cd7..80aad835e7a6f60cc2367917824842575aff2684 100644 (file)
--- a/package/madwifi/patches/105-ratectl_attach.patch
+++ b/package/madwifi/patches/105-ratectl_attach.patch
@@ -8,7 +8,7 @@
 -              return NULL;
 +              /* pick the first available rate control module */
 +              printk(KERN_INFO "Rate control module \"%s\" not available\n", buf);
-+              for (id = 0; id < IEEE80211_RATE_MAX; id++) {
++              for (id = 0; id < IEEE80211_RATE_MAX - 1; id++) {
 +                      if (ratectls[id].attach)
 +                              break;
 +              }