The size of the buffer is IWL_FW_TRIGGER_ID_NUM - 1 which is equal to
IWL_FW_TRIGGER_ID_HOST_CHANNEL_SWITCH_COMPLETE so if the driver receives
this trigger, it will cause a buffer overflow.
Solve this by increasing the buffer size by 1.
Signed-off-by: Shahar S Matityahu <shahar.s.matityahu@intel.com>
Fixes:
|
||
|---|---|---|
| .. | ||
| ipw2x00 | ||
| iwlegacy | ||
| iwlwifi | ||
| Kconfig | ||
| Makefile | ||