mac80211: fix a buffer overrun in station debug code
net/mac80211/debugfs_sta.c The trailing zero was written to state[4], it's out of bounds. Signed-off-by: Jianjun Kong <jianjun@zeuux.org> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
parent
b7b45f47d6
commit
013cd39753
|
@ -199,7 +199,7 @@ static ssize_t sta_agg_status_write(struct file *file,
|
|||
/* toggle Rx aggregation command */
|
||||
tid_num = tid_num - 100;
|
||||
if (tid_static_rx[tid_num] == 1) {
|
||||
strcpy(state, "off ");
|
||||
strcpy(state, "off");
|
||||
ieee80211_sta_stop_rx_ba_session(sta->sdata, da, tid_num, 0,
|
||||
WLAN_REASON_QSTA_REQUIRE_SETUP);
|
||||
sta->ampdu_mlme.tid_state_rx[tid_num] |=
|
||||
|
|
Loading…
Reference in New Issue