| From 088ea189c4c75cdf211146faa4b341a0f7476be6 Mon Sep 17 00:00:00 2001 |
| From: Darren Jenkins <darrenrjenkins@gmail.com> |
| Date: Wed, 17 Feb 2010 23:40:15 +1100 |
| Subject: drivers/net/wireless/p54/txrx.c Fix off by one error |
| |
| From: Darren Jenkins <darrenrjenkins@gmail.com> |
| |
| commit 088ea189c4c75cdf211146faa4b341a0f7476be6 upstream. |
| |
| fix off by one error in the queue size check of p54_tx_qos_accounting_alloc() |
| |
| Coverity CID: 13314 |
| |
| Signed-off-by: Darren Jenkins <darrenrjenkins@gmail.com> |
| Signed-off-by: John W. Linville <linville@tuxdriver.com> |
| Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de> |
| |
| --- |
| drivers/net/wireless/p54/txrx.c | 2 +- |
| 1 file changed, 1 insertion(+), 1 deletion(-) |
| |
| --- a/drivers/net/wireless/p54/txrx.c |
| +++ b/drivers/net/wireless/p54/txrx.c |
| @@ -186,7 +186,7 @@ static int p54_tx_qos_accounting_alloc(s |
| struct ieee80211_tx_queue_stats *queue; |
| unsigned long flags; |
| |
| - if (WARN_ON(p54_queue > P54_QUEUE_NUM)) |
| + if (WARN_ON(p54_queue >= P54_QUEUE_NUM)) |
| return -EINVAL; |
| |
| queue = &priv->tx_stats[p54_queue]; |
