From: Johannes Berg <johannes.berg@intel.com>
Date: Tue, 30 Jul 2013 20:34:28 +0000 (+0200)
Subject: nl80211: fix another nl80211_fam.attrbuf race
X-Git-Tag: v3.11-rc6~11^2~35^2^2~1^2~5
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c319d50bfcf678c2857038276d9fab3c6646f3bf;p=pandora-kernel.git

nl80211: fix another nl80211_fam.attrbuf race

This is similar to the race Linus had reported, but in this case
it's an older bug: nl80211_prepare_wdev_dump() uses the wiphy
index in cb->args[0] as it is and thus parses the message over
and over again instead of just once because 0 is the first valid
wiphy index. Similar code in nl80211_testmode_dump() correctly
offsets the wiphy_index by 1, do that here as well.

Cc: stable@vger.kernel.org
Reported-by: Ben Hutchings <ben@decadent.org.uk>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
---

Reading git-diff-tree failed