iwlegacy: off by one in iwl3945_hw_build_tx_cmd_rate()
authorDan Carpenter <dan.carpenter@oracle.com>
Fri, 23 Dec 2011 07:13:42 +0000 (08:13 +0100)
committerJohn W. Linville <linville@tuxdriver.com>
Wed, 4 Jan 2012 19:30:44 +0000 (14:30 -0500)
commitd71be937202853eda76562e9678073465d5c0fa8
treedd9161a0a8f35737deedd0ccbdc29ea4651efac4
parent2b20920d639da3ee275fcc691431b5b3daa9a3e7
iwlegacy: off by one in iwl3945_hw_build_tx_cmd_rate()

We use "rate_index" like this:
rate = iwl3945_rates[rate_index].plcp;
The iwl3945_rates[] array has IWL_RATE_COUNT_3945 elements so the
limit here is off by one.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Stanislaw Gruszka <sgruszka@redhat.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
drivers/net/wireless/iwlegacy/3945.c