From: Jason Conti Date: Thu, 7 Apr 2011 19:09:57 +0000 (+0200) Subject: p54: Initialize extra_len in p54_tx_80211 X-Git-Tag: v2.6.39-rc5~40^2~37^2~1 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a6756da9eace8b4af73e9dea43f1fc2889224c94;p=pandora-kernel.git p54: Initialize extra_len in p54_tx_80211 This patch fixes a very serious off-by-one bug in the driver, which could leave the device in an unresponsive state. The problem was that the extra_len variable [used to reserve extra scratch buffer space for the firmware] was left uninitialized. Because p54_assign_address later needs the value to reserve additional space, the resulting frame could be to big for the small device's memory window and everything would immediately come to a grinding halt. Reference: https://bugs.launchpad.net/bugs/722185 Cc: Acked-by: Christian Lamparter Signed-off-by: Jason Conti Signed-off-by: John W. Linville --- Reading git-diff-tree failed