diff options
| author | Jean Tourrilhes <jt@hpl.hp.com> | 2006-10-10 23:45:46 +0200 |
|---|---|---|
| committer | John W. Linville <linville@tuxdriver.com> | 2006-10-17 02:09:48 +0200 |
| commit | 53077944f119808df3d1c6be07241f17a87e7c28 (patch) | |
| tree | 3427e3f0ba877eaeaed102ebcd32fb90afa5e865 /drivers/net/wireless/airo.c | |
| parent | [PATCH] zd1201: Possible NULL dereference (diff) | |
| download | linux-53077944f119808df3d1c6be07241f17a87e7c28.tar.xz linux-53077944f119808df3d1c6be07241f17a87e7c28.zip | |
[PATCH] wireless: More WE-21 potential overflows...
After the Orinoco issue, I did an audit of other drivers for the same
issue. Three drivers were NULL terminating the ESSID, which could cause an
overflow in WE-21 when the ESSID has maximum size.
Signed-off-by: Jean Tourrilhes <jt@hpl.hp.com>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Diffstat (limited to 'drivers/net/wireless/airo.c')
| -rw-r--r-- | drivers/net/wireless/airo.c | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/drivers/net/wireless/airo.c b/drivers/net/wireless/airo.c index 9d5427a6e609..e0710fa9702e 100644 --- a/drivers/net/wireless/airo.c +++ b/drivers/net/wireless/airo.c @@ -5970,7 +5970,6 @@ static int airo_get_essid(struct net_device *dev, /* Get the current SSID */ memcpy(extra, status_rid.SSID, status_rid.SSIDlen); - extra[status_rid.SSIDlen] = '\0'; /* If none, we may want to get the one that was set */ /* Push it out ! */ |