---

yaml --- r: 341453 b: refs/heads/master c: 363f149 h: refs/heads/master i: 341451: 480c81b v: v3
git-mirror · Oct 24, 2012 · a2df8a7 · a2df8a7
1 parent 536aec5
commit a2df8a7
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/[refs] b/[refs]
@@ -1,2 +1,2 @@
 ---
-refs/heads/master: d54601b92fbde2a7021a844e1373ba8c778cc0a3
+refs/heads/master: 363f149ce37bea91069177eab691111b242bfe73
diff --git a/trunk/drivers/net/wireless/ath/ath6kl/txrx.c b/trunk/drivers/net/wireless/ath/ath6kl/txrx.c
@@ -293,6 +293,12 @@ int ath6kl_control_tx(void *devt, struct sk_buff *skb,
 		return -EACCES;
 	}
 
+	if (WARN_ON_ONCE(eid == ENDPOINT_UNUSED ||
+			 eid >= ENDPOINT_MAX)) {
+		status = -EINVAL;
+		goto fail_ctrl_tx;
+	}
+
 	spin_lock_bh(&ar->lock);
 
 	ath6kl_dbg(ATH6KL_DBG_WLAN_TX,