From: Sasha Levin Date: Thu, 28 May 2015 15:03:56 +0000 (-0400) Subject: staging: wilc1000: off by one in wilc_wfi_cfg80211_mgmt_types X-Git-Url: https://git.stricted.de/?a=commitdiff_plain;h=adf1b358a9c97b8d73dc91ade96f2a9f225921e1;p=GitHub%2FLineageOS%2Fandroid_kernel_motorola_exynos9610.git staging: wilc1000: off by one in wilc_wfi_cfg80211_mgmt_types NL80211_IFTYPE_MAX represents the largest interface type number defined, so declaring the array with that size will actually leave out the last interface. This causes invalid memory access whenever this array is used, which starts happening at boot. Signed-off-by: Sasha Levin Signed-off-by: Greg Kroah-Hartman --- diff --git a/drivers/staging/wilc1000/wilc_wfi_cfgoperations.h b/drivers/staging/wilc1000/wilc_wfi_cfgoperations.h index 508db6a3f6dd..829ba32ea210 100644 --- a/drivers/staging/wilc1000/wilc_wfi_cfgoperations.h +++ b/drivers/staging/wilc1000/wilc_wfi_cfgoperations.h @@ -77,7 +77,7 @@ static const u32 cipher_suites[] = { }; static const struct ieee80211_txrx_stypes - wilc_wfi_cfg80211_mgmt_types[NL80211_IFTYPE_MAX] = { + wilc_wfi_cfg80211_mgmt_types[NUM_NL80211_IFTYPES] = { [NL80211_IFTYPE_STATION] = { .tx = 0xffff, .rx = BIT(IEEE80211_STYPE_ACTION >> 4) |