Dan Carpenter 95edbc30db mwifiex: potential integer underflow in mwifiex_ret_wmm_get_status() ...

Before we loop for next iteration we adjust the buffer pointer and
"resp_len":

		curr += (tlv_len + sizeof(tlv_hdr->header));
		resp_len -= (tlv_len + sizeof(tlv_hdr->header));

If "resp_len" gets set to negative then it counts as a high positive
value.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Amitkumar Karwar <akarwar@marvell.com>
Signed-off-by: Bing Zhao <bzhao@marvell.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>

2013-11-11 14:38:56 -05:00

..

ath

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next into for-davem

2013-11-08 09:03:10 -05:00

b43

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next into for-davem

2013-11-04 14:51:28 -05:00

b43legacy

net:drivers/net: Miscellaneous conversions to ETH_ALEN

2013-10-02 17:04:45 -04:00

brcm80211

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next into for-davem

2013-11-04 14:51:28 -05:00

cw1200

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless

2013-11-04 14:45:14 -05:00

hostap

net:drivers/net: Miscellaneous conversions to ETH_ALEN

2013-10-02 17:04:45 -04:00

ipw2x00

Merge git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next

2013-10-07 15:40:44 -04:00

iwlegacy

Merge git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next

2013-10-07 15:40:44 -04:00

iwlwifi

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next into for-davem

2013-11-08 09:03:10 -05:00

libertas

libertas: move firmware lifetime handling to firmware.c

2013-10-18 14:03:54 -04:00

libertas_tf

…

mwifiex

mwifiex: potential integer underflow in mwifiex_ret_wmm_get_status()

2013-11-11 14:38:56 -05:00

orinoco

Merge git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next

2013-10-07 15:40:44 -04:00

p54

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless

2013-11-04 14:45:14 -05:00

prism54

net:drivers/net: Miscellaneous conversions to ETH_ALEN

2013-10-02 17:04:45 -04:00

rt2x00

wireless: rt2800lib: Fix typo on checking

2013-11-11 14:38:55 -05:00

rtl818x

wireless: rtl818x: remove unnecessary pci_set_drvdata()

2013-09-26 15:13:45 -04:00

rtlwifi

rtlwifi: rtl8192se: Fix wrong assignment

2013-11-11 14:38:55 -05:00

ti

wlcore: save last regdom configuration on stop

2013-10-23 09:47:45 +03:00

zd1211rw

…

adm8211.c

wireless: adm8211: remove unnecessary pci_set_drvdata()

2013-09-26 15:13:42 -04:00

adm8211.h

…

airo_cs.c

…

airo.c

wireless: airo: remove unnecessary pci_set_drvdata()

2013-09-26 15:13:42 -04:00

airo.h

…

at76c50x-usb.c

…

at76c50x-usb.h

…

atmel_cs.c

…

atmel_pci.c

…

atmel.c

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next into for-davem

2013-11-04 14:51:28 -05:00

atmel.h

…

Kconfig

…

mac80211_hwsim.c

mac80211_hwsim: Fix tracking of beaconing for multi-vif

2013-10-28 15:11:07 +01:00

mac80211_hwsim.h

…

Makefile

…

mwl8k.c

wireless: mwl8k: remove unnecessary pci_set_drvdata()

2013-09-26 15:13:44 -04:00

ray_cs.c

…

ray_cs.h

…

rayctl.h

…

rndis_wlan.c

…

wl3501_cs.c

…

wl3501.h

…

zd1201.c

…

zd1201.h

…