diff options
| author | Damien Bergamini <damien@cvs.openbsd.org> | 2006-10-22 08:25:44 +0000 |
|---|---|---|
| committer | Damien Bergamini <damien@cvs.openbsd.org> | 2006-10-22 08:25:44 +0000 |
| commit | 1658f626efe98badfc47aaa798c7463bac80228b (patch) | |
| tree | 038a445e2b7e5ba616055bf03e93ec152a56dbd6 /sys/dev/cardbus/ehci_cardbus.c | |
| parent | 0151bcc827a0bd4290ad26023a7649320025d166 (diff) | |
Check that ni->ni_rates.rs_nrates is not greater than sizeof rs.rates in
iwi_auth_and_assoc() before copying the rate set.
The firmware command allows a maximum of 12 rates to be defined while the
ieee80211_rateset structure can contain up to 15 rates.
Notice that this should not happen since the rate set is supposed to be
negotiated at that time but Jeremie Le Hen sees some evidence of this
happening in FreeBSD.
In case it happens, print a diagnostic message and truncate the rate set.
Pointed out by Jeremie Le Hen.
Diffstat (limited to 'sys/dev/cardbus/ehci_cardbus.c')
0 files changed, 0 insertions, 0 deletions