diff options
| author | Theo de Raadt <deraadt@cvs.openbsd.org> | 2009-06-05 22:40:32 +0000 |
|---|---|---|
| committer | Theo de Raadt <deraadt@cvs.openbsd.org> | 2009-06-05 22:40:32 +0000 |
| commit | 142aa41d9e9f337c6be5a4c56d5e14d54bf4e6c5 (patch) | |
| tree | cf045b5d715105f4d6a373c290946257b3f3300b /sys | |
| parent | 4e9d97f9bd4bf6ffea35c2fc1c968806bab268a6 (diff) | |
T
ariane's new allocator gave iwi dirty memory, and made a real bug fall out.
The kva was being stored in a structure hidden by a cast, but passing the
"structure" corrupts subsequent arguments to bus_dmamap_load().
group effort with ariane, kettenis, and oga.
Diffstat (limited to 'sys')
| -rw-r--r-- | sys/dev/pci/if_iwivar.h | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/sys/dev/pci/if_iwivar.h b/sys/dev/pci/if_iwivar.h index 73d9fb37d11..c98d3ebc0ab 100644 --- a/sys/dev/pci/if_iwivar.h +++ b/sys/dev/pci/if_iwivar.h @@ -1,4 +1,4 @@ -/* $OpenBSD: if_iwivar.h,v 1.19 2008/08/28 15:52:20 damien Exp $ */ +/* $OpenBSD: if_iwivar.h,v 1.20 2009/06/05 22:40:31 deraadt Exp $ */ /*- * Copyright (c) 2004-2006 @@ -49,7 +49,7 @@ struct iwi_tx_radiotap_header { struct iwi_cmd_ring { bus_dmamap_t map; bus_dma_segment_t seg; - struct iwi_cmd_desc desc[IWI_CMD_RING_COUNT]; + struct iwi_cmd_desc *desc; int queued; int cur; int next; |