From: Roel Kluin <roel.kluin@gmail.com>
Date: Sat, 25 Jul 2009 21:34:31 +0000 (+0200)
Subject: iwlwifi: Read outside array bounds
X-Git-Tag: v2.6.31-rc6~68^2~30^2~4
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=082e708acc50a5b625b9bde0bb1af90dfdbd1942;p=pandora-kernel.git

iwlwifi: Read outside array bounds

tid is bounded (above) by the size of default_tid_to_tx_fifo (17 elements), but
the size of priv->stations[].tid[] is MAX_TID_COUNT (9) elements.

Signed-off-by: Roel Kluin <roel.kluin@gmail.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
---

Reading git-diff-tree failed