Files
android_kernel_xiaomi_sm8450/drivers/net/wireless/ath/ath9k
Pavel Roskin 2504a6423b ath9k: stop on rates with idx -1 in ath9k rate control's .tx_status
Rate control algorithms are supposed to stop processing when they
encounter a rate with the index -1.  Checking for rate->count not being
zero is not enough.

Allowing a rate with negative index leads to memory corruption in
ath_debug_stat_rc().

One consequence of the bug is discussed at
https://bugzilla.redhat.com/show_bug.cgi?id=768639

Signed-off-by: Pavel Roskin <proski@gnu.org>
Cc: stable@vger.kernel.org
Signed-off-by: John W. Linville <linville@tuxdriver.com>
2012-02-15 13:56:15 -05:00
..
2011-10-14 14:48:23 -04:00
2012-01-10 15:46:39 -05:00
2012-01-10 15:46:39 -05:00
2012-01-10 15:46:39 -05:00
2011-10-11 16:41:26 -04:00
2011-12-15 14:46:37 -05:00
2011-12-15 14:46:37 -05:00
2011-12-15 14:46:37 -05:00
2011-08-10 14:07:42 -04:00
2011-12-15 14:46:37 -05:00
2011-12-15 14:46:37 -05:00
2012-01-04 14:30:42 -05:00
2011-05-19 13:54:05 -04:00
2011-05-19 13:54:05 -04:00