summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJianjun Kong <jianjun@zeuux.org>2008-11-10 21:37:39 -0800
committerGreg Kroah-Hartman <gregkh@suse.de>2009-02-17 09:46:29 -0800
commite90d4b294fe2f8bcb0f3caf1c0ce1931a2818198 (patch)
tree56f820ab2a8815e8c02f9f47074bbe864091a5a3
parent9dea2dbc6470314e34f4a9aa5bccba5eee5e4ff8 (diff)
mac80211: fix a buffer overrun in station debug code
commit 013cd397532e5803a1625954a884d021653da720 upstream. net/mac80211/debugfs_sta.c The trailing zero was written to state[4], it's out of bounds. Signed-off-by: Jianjun Kong <jianjun@zeuux.org> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
-rw-r--r--net/mac80211/debugfs_sta.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/net/mac80211/debugfs_sta.c b/net/mac80211/debugfs_sta.c
index 79a062782d52..27bd35391949 100644
--- a/net/mac80211/debugfs_sta.c
+++ b/net/mac80211/debugfs_sta.c
@@ -200,7 +200,7 @@ static ssize_t sta_agg_status_write(struct file *file,
/* toggle Rx aggregation command */
tid_num = tid_num - 100;
if (tid_static_rx[tid_num] == 1) {
- strcpy(state, "off ");
+ strcpy(state, "off");
ieee80211_sta_stop_rx_ba_session(dev, da, tid_num, 0,
WLAN_REASON_QSTA_REQUIRE_SETUP);
sta->ampdu_mlme.tid_state_rx[tid_num] |=