diff options
| author | Colin Ian King | 2018-12-20 15:05:50 +0100 |
|---|---|---|
| committer | Kalle Valo | 2019-01-10 12:32:40 +0100 |
| commit | 72255c807156adeb167444c4206c9e5eece22287 (patch) | |
| tree | 2db0328e870a94eec8574bf7aa0f89f1a1582c3b /drivers/net/wireless/broadcom/brcm80211 | |
| parent | wlcore: Fix memory leak in case wl12xx_fetch_firmware failure (diff) | |
| download | kernel-qcow2-linux-72255c807156adeb167444c4206c9e5eece22287.tar.gz kernel-qcow2-linux-72255c807156adeb167444c4206c9e5eece22287.tar.xz kernel-qcow2-linux-72255c807156adeb167444c4206c9e5eece22287.zip | |
ray_cs: fix array out-of-bounds access
Currently array element org[3] is being accessed, however the array is
only 3 elements in size, so this looks like an off-by-one out-of-bounds
error. Fix this by using org[2], which I believe was the original
intent.
This issue has existed in the driver back in the pre-git days, so no
idea when it was introduced.
Detected by CoverityScan, CID#711344 ("Out-of-bounds read")
Signed-off-by: Colin Ian King <colin.king@canonical.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Diffstat (limited to 'drivers/net/wireless/broadcom/brcm80211')
0 files changed, 0 insertions, 0 deletions