diff options
| author | Roel Kluin <roel.kluin@gmail.com> | 2009-08-02 09:44:12 +0200 |
|---|---|---|
| committer | John W. Linville <linville@tuxdriver.com> | 2009-08-03 16:31:23 -0400 |
| commit | b929c633b4067be18a335d278a66fd5deef3cabe (patch) | |
| tree | 9f6c870c603d43b3106e30cb6522f967db94fb94 /drivers | |
| parent | 9f9857bb5e147b977b9878c46e3dd87c9e8caf50 (diff) | |
| download | linux-b929c633b4067be18a335d278a66fd5deef3cabe.tar.bz2 | |
libertas: Read buffer overflow
Check whether index is within bounds before testing the element.
Signed-off-by: Roel Kluin <roel.kluin@gmail.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Diffstat (limited to 'drivers')
| -rw-r--r-- | drivers/net/wireless/libertas/11d.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/net/wireless/libertas/11d.c b/drivers/net/wireless/libertas/11d.c index 9a5408e7d94a..5c6968101f0d 100644 --- a/drivers/net/wireless/libertas/11d.c +++ b/drivers/net/wireless/libertas/11d.c @@ -47,7 +47,7 @@ static u8 lbs_region_2_code(u8 *region) { u8 i; - for (i = 0; region[i] && i < COUNTRY_CODE_LEN; i++) + for (i = 0; i < COUNTRY_CODE_LEN && region[i]; i++) region[i] = toupper(region[i]); for (i = 0; i < ARRAY_SIZE(region_code_mapping); i++) { |