iwmc3200wifi: fix array out-of-boundary access

[pandora-kernel.git] / drivers / net / wireless / iwmc3200wifi / iwm.h

diff --git a/drivers/net/wireless/iwmc3200wifi/iwm.h b/drivers/net/wireless/iwmc3200wifi/iwm.h
index 79ffa3b..8428111 100644 (file)
--- a/drivers/net/wireless/iwmc3200wifi/iwm.h
+++ b/drivers/net/wireless/iwmc3200wifi/iwm.h
@@ -268,7 +268,7 @@ struct iwm_priv {
 
        struct sk_buff_head rx_list;
        struct list_head rx_tickets;
 
        struct sk_buff_head rx_list;
        struct list_head rx_tickets;

-       struct list_head rx_packets[IWM_RX_ID_HASH];
+       struct list_head rx_packets[IWM_RX_ID_HASH + 1];

        struct workqueue_struct *rx_wq;
        struct work_struct rx_worker;
 
        struct workqueue_struct *rx_wq;
        struct work_struct rx_worker;