linux/drivers
Jason Conti a6756da9ea p54: Initialize extra_len in p54_tx_80211
This patch fixes a very serious off-by-one bug in
the driver, which could leave the device in an
unresponsive state.

The problem was that the extra_len variable [used to
reserve extra scratch buffer space for the firmware]
was left uninitialized. Because p54_assign_address
later needs the value to reserve additional space,
the resulting frame could be to big for the small
device's memory window and everything would
immediately come to a grinding halt.

Reference: https://bugs.launchpad.net/bugs/722185

Cc: <stable@kernel.org>
Acked-by: Christian Lamparter <chunkeey@googlemail.com>
Signed-off-by: Jason Conti <jason.conti@gmail.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
2011-04-08 13:06:30 -04:00
..
accessibility
acpi acpi: Remove sysfs_create_link from video driver 2011-03-28 13:05:29 -07:00
amba
ata drivers: Final irq namespace conversion 2011-03-29 14:48:19 +02:00
atm atm/solos-pci: Don't flap VCs when carrier state changes 2011-03-30 16:53:38 -07:00
auxdisplay
base
block drbd: fix up merge error 2011-03-28 07:42:58 -07:00
bluetooth
cdrom
char char/tpm: Fix unitialized usage of data buffer 2011-03-29 09:45:34 -07:00
clk
clocksource
connector connector: convert to synchronous netlink message processing 2011-03-30 17:14:33 -07:00
cpufreq
cpuidle
crypto
dca
dio
dma
edac amd64_edac: Fix potential memleak 2011-03-29 18:19:06 +02:00
eisa
firewire
firmware
gpio gpio: ab8500: Mark broken 2011-03-29 14:50:42 +02:00
gpu
hid
hwmon drivers: Final irq namespace conversion 2011-03-29 14:48:19 +02:00
hwspinlock
i2c
ide
idle
ieee802154
infiniband
input drivers: Final irq namespace conversion 2011-03-29 14:48:19 +02:00
isdn
leds
lguest
macintosh
mca
md md: Fix integrity registration error when no devices are capable 2011-03-28 17:53:29 -07:00
media
memstick memstick: make enable_dma less generic in r592 2011-03-28 16:24:29 -07:00
message
mfd Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/cjb/mmc 2011-03-29 12:09:30 -07:00
misc drivers: Final irq namespace conversion 2011-03-29 14:48:19 +02:00
mmc Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/cjb/mmc 2011-03-29 12:09:30 -07:00
mtd
net p54: Initialize extra_len in p54_tx_80211 2011-04-08 13:06:30 -04:00
nfc
nubus
of
oprofile
parisc parisc: Convert irq namespace 2011-03-29 14:48:08 +02:00
parport
pci drivers: Final irq namespace conversion 2011-03-29 14:48:19 +02:00
pcmcia drivers: Final irq namespace conversion 2011-03-29 14:48:19 +02:00
platform drivers: Final irq namespace conversion 2011-03-29 14:48:19 +02:00
pnp
power drivers: Final irq namespace conversion 2011-03-29 14:48:19 +02:00
pps
ps3
rapidio
regulator
rtc drivers: Final irq namespace conversion 2011-03-29 14:48:19 +02:00
s390
sbus
scsi
sfi
sh sh: Convert to new function names 2011-03-29 14:48:13 +02:00
sn
spi
ssb
staging drivers: Final irq namespace conversion 2011-03-29 14:48:19 +02:00
target
tc
telephony
thermal
tty drivers: Final irq namespace conversion 2011-03-29 14:48:19 +02:00
uio
usb drivers: Final irq namespace conversion 2011-03-29 14:48:19 +02:00
uwb
vhost
video
virtio
vlynq vlynq: Convert irq functions 2011-03-28 19:33:04 +02:00
w1 drivers: Final irq namespace conversion 2011-03-29 14:48:19 +02:00
watchdog watchdog: softdog.c: enhancement to optionally invoke panic instead of reboot on timer expiry 2011-03-29 11:56:22 +00:00
xen xen: Use new irq_move functions 2011-03-29 10:01:05 -04:00
zorro
Kconfig
Makefile