commit 6b89db36b3ab7c4b99027873e1de4be8d07387d4
author Maurizio Lombardi <mlombard@redhat.com> Wed Feb 05 16:46:56 2014 +0100
committer Greg Kroah-Hartman <gregkh@linuxfoundation.org> Fri Feb 07 11:10:08 2014 -0800
tree 3dfa78fca726fdc6042e6e766bee31d34e3b20d4
parent ad3815a595fd7a5c5e4a24947a56eec29582a505

wlags49_h2: Fix overflow in wireless_set_essid()

This patch prevents the wireless_set_essid() function from overwriting
the last byte of the NetworkName buffer which must be NULL.

Signed-off-by: Maurizio Lombardi <mlombard@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

drivers/staging/wlags49_h2/wl_wext.c

diff --git a/drivers/staging/wlags49_h2/wl_wext.c b/drivers/staging/wlags49_h2/wl_wext.c
index 4a1ddaf5..187fc06 100644
--- a/drivers/staging/wlags49_h2/wl_wext.c
+++ b/drivers/staging/wlags49_h2/wl_wext.c
@@ -1061,7 +1061,7 @@
 		goto out;
 	}
 
-	if (data->flags != 0 && data->length > HCF_MAX_NAME_LEN + 1) {
+	if (data->flags != 0 && data->length > HCF_MAX_NAME_LEN) {
 		ret = -EINVAL;
 		goto out;
 	}