linux/drivers/staging/rtl8192su
Dan Carpenter 88e05d854c Staging: rtl8192su: buffer overflow in r8192U_core.c
There was a buffer overflow in the original code.  rf_path was 2 and it should
have been only 0 or 1.

I don't have the hardware for this, so I can't test it.

Looking at the code, there are two almost identical sections for updating the
hal variables.  The first one was clearly wrong and had the array overflow as 
well.  The second one looked correct.  I decided to use the second section as
is except for whitespace changes.

The differences between the two original sections:
1)  The second one had more debug output.
2)  The second one looped over rf_path instead of corrupting data.
3)  The second one had these additional assigments.
                      if (rf_path == 0) {
                              priv->TxPowerLevelOFDM24G[i] = priv->RfTxPwrLevelOfdm1T[rf_path][i] ;
                              priv->TxPowerLevelCCK[i] = priv->RfTxPwrLevelCck[rf_path][i];
                      }

Signed-off-by: Dan Carpenter <error27@gmail.com>
Cc: Jerry chuang <wlanfae@realtek.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
2010-03-03 16:42:39 -08:00
..
ieee80211 Staging: rtl8192su, rtl8192u: use min_t() in store_debug_level() 2010-03-03 16:42:38 -08:00
authors
Kconfig Staging: rtl8192su: Build should select WIRELESS_EXT 2010-03-03 16:42:33 -08:00
Makefile Staging: rtl8192su: compile fixes 2009-09-15 12:02:16 -07:00
r819xU_cmdpkt.c Staging: fix assorted typos all over the place 2009-12-11 12:23:20 -08:00
r819xU_cmdpkt.h Staging: rtl8192su: remove dead code 2009-09-15 12:01:40 -07:00
r819xU_HTGen.h
r819xU_HTType.h Staging: rtl8192su: remove USB_TX_DRIVER_AGGREGATION_ENABLE ifdefs 2009-09-15 12:01:37 -07:00
r8180_93cx6.c
r8180_93cx6.h Staging: rtl8192su: remove RTL8192SU ifdefs 2009-09-15 12:01:39 -07:00
r8192S_Efuse.c Staging: rtl8192su: remove dead code 2009-09-15 12:01:40 -07:00
r8192S_Efuse.h
r8192S_firmware.c Staging: rtl8192su: remove NOT_YET ifdefs 2009-09-15 12:01:42 -07:00
r8192S_firmware.h Staging: rtl8192su: remove RTL8192SE ifdefs 2009-09-15 12:01:39 -07:00
r8192S_hw.h Staging: rtl8192su: remove dead code 2009-09-15 12:01:40 -07:00
r8192S_phy.c Staging: fix assorted typos all over the place 2009-12-11 12:23:20 -08:00
r8192S_phy.h Staging: rtl8192su: remove kernel version compatibility wrappers 2009-09-15 12:01:28 -07:00
r8192S_phyreg.h Staging: fix assorted typos all over the place 2009-12-11 12:23:20 -08:00
r8192S_rtl6052.c Staging: fix assorted typos all over the place 2009-12-11 12:23:20 -08:00
r8192S_rtl6052.h Staging: rtl8192su: remove dead code 2009-09-15 12:01:40 -07:00
r8192S_rtl8225.c
r8192S_rtl8225.h
r8192SU_HWImg.c
r8192SU_HWImg.h
r8192U_core.c Staging: rtl8192su: buffer overflow in r8192U_core.c 2010-03-03 16:42:39 -08:00
r8192U_dm.c Staging: rtl8187x: Use %pM for mac address output 2010-03-03 16:42:29 -08:00
r8192U_dm.h Staging: rtl8192su: remove dead code 2009-09-15 12:01:40 -07:00
r8192U_pm.c Staging: rtl8192su: remove CONFIG_RTL8192_PM ifdefs 2009-09-15 12:01:37 -07:00
r8192U_pm.h Staging: rtl8192su: remove CONFIG_RTL8192_PM ifdefs 2009-09-15 12:01:37 -07:00
r8192U_wx.c Staging: fix assorted typos all over the place 2009-12-11 12:23:20 -08:00
r8192U_wx.h Staging: rtl8192su: remove duplicate dot11d.h and ieee80211.h includes 2009-09-15 12:01:27 -07:00
r8192U.h Staging: rtl8192su: remove dead code 2009-09-15 12:01:40 -07:00
TODO Staging: update TODO files 2009-11-30 16:39:42 -08:00