mirror of
https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git
synced 2026-10-12 15:49:17 -04:00
staging: vt6656: vnt_rf_setpower rate <= RATE_11M check array bound
decrement channel by one and check array bound. Signed-off-by: Malcolm Priestley <tvboxspy@gmail.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
This commit is contained in:
parent
72183c6b0c
commit
89daee6ff5
1 changed files with 4 additions and 1 deletions
|
|
@ -744,7 +744,10 @@ int vnt_rf_setpower(struct vnt_private *priv, u32 rate, u32 channel)
|
|||
case RATE_2M:
|
||||
case RATE_5M:
|
||||
case RATE_11M:
|
||||
power = priv->abyCCKPwrTbl[channel-1];
|
||||
channel--;
|
||||
|
||||
if (channel < sizeof(priv->abyCCKPwrTbl))
|
||||
power = priv->abyCCKPwrTbl[channel];
|
||||
break;
|
||||
case RATE_6M:
|
||||
case RATE_9M:
|
||||
|
|
|
|||
Loading…
Reference in a new issue