Commit dc427fe7 authored Aug 30, 2013 by Dan Carpenter Committed by Greg Kroah-Hartman Aug 30, 2013

staging: rtl8188eu: off by one in rtw_set_802_11_add_wep()



"keyid" is used as an offset into the ->dot11DefKey[] array.  The array
has 4 elements.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

parent 15f7af8b

drivers/staging/rtl8188eu/core/rtw_ioctl_set.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -566,7 +566,7 @@ _func_enter_;

		keyid = wep->KeyIndex & 0x3fffffff;

		if (keyid > 4) {
		if (keyid >= 4) {
		RT_TRACE(_module_rtl871x_ioctl_set_c_, _drv_err_, ("MgntActrtw_set_802_11_add_wep:keyid>4 =>fail\n"));
		ret = false;
		goto exit;

Admin message