cfg80211: off by one in nl80211_trigger_scan()
The test is off by one so we'd read past the end of the wiphy->bands[] array on the next line. Signed-off-by: Dan Carpenter <error27@gmail.com> Signed-off-by: John W. Linville <linville@tuxdriver.com>
This commit is contained in:
parent
17e859a899
commit
84404623da
|
@ -3464,7 +3464,7 @@ static int nl80211_trigger_scan(struct sk_buff *skb, struct genl_info *info)
|
|||
tmp) {
|
||||
enum ieee80211_band band = nla_type(attr);
|
||||
|
||||
if (band < 0 || band > IEEE80211_NUM_BANDS) {
|
||||
if (band < 0 || band >= IEEE80211_NUM_BANDS) {
|
||||
err = -EINVAL;
|
||||
goto out_free;
|
||||
}
|
||||
|
|
Loading…
Reference in New Issue