madwifi: fix an array overrun in the rate control attach check

[openwrt/svn-archive/archive.git] / package / madwifi / patches / 105-ratectl_attach.patch

diff --git a/package/madwifi/patches/105-ratectl_attach.patch b/package/madwifi/patches/105-ratectl_attach.patch
index 512bda7d6aeb23b2fb64df240d35eada91b7f2a1..80aad835e7a6f60cc2367917824842575aff2684 100644 (file)
--- a/package/madwifi/patches/105-ratectl_attach.patch
+++ b/package/madwifi/patches/105-ratectl_attach.patch
@@ -1,7 +1,6 @@
-diff -urN madwifi-ng-refcount-r2313-20070505.old/net80211/ieee80211_rate.c madwifi-ng-refcount-r2313-20070505.dev/net80211/ieee80211_rate.c
---- madwifi-ng-refcount-r2313-20070505.old/net80211/ieee80211_rate.c   2007-04-04 23:25:20.000000000 +0200
-+++ madwifi-ng-refcount-r2313-20070505.dev/net80211/ieee80211_rate.c   2007-05-13 18:17:55.368151800 +0200
-@@ -100,8 +100,18 @@
+--- a/net80211/ieee80211_rate.c
++++ b/net80211/ieee80211_rate.c
+@@ -100,8 +100,18 @@ struct ath_ratectrl *ieee80211_rate_atta
                ieee80211_load_module(buf);
  
        if (!ratectls[id].attach) {
@@ -9,7 +8,7 @@ diff -urN madwifi-ng-refcount-r2313-20070505.old/net80211/ieee80211_rate.c madwi
 -              return NULL;
 +              /* pick the first available rate control module */
 +              printk(KERN_INFO "Rate control module \"%s\" not available\n", buf);
-+              for (id = 0; id < IEEE80211_RATE_MAX; id++) {
++              for (id = 0; id < IEEE80211_RATE_MAX - 1; id++) {
 +                      if (ratectls[id].attach)
 +                              break;
 +              }