Commit 013cd397532e5803a1625954a884d021653da720

Authored by Jianjun Kong
Committed by David S. Miller
1 parent b7b45f47d6

mac80211: fix a buffer overrun in station debug code

net/mac80211/debugfs_sta.c
The trailing zero was written to state[4], it's out of bounds.

Signed-off-by: Jianjun Kong <jianjun@zeuux.org>
Signed-off-by: David S. Miller <davem@davemloft.net>

Showing 1 changed file with 1 additions and 1 deletions Side-by-side Diff

net/mac80211/debugfs_sta.c
... ... @@ -199,7 +199,7 @@
199 199 /* toggle Rx aggregation command */
200 200 tid_num = tid_num - 100;
201 201 if (tid_static_rx[tid_num] == 1) {
202   - strcpy(state, "off ");
  202 + strcpy(state, "off");
203 203 ieee80211_sta_stop_rx_ba_session(sta->sdata, da, tid_num, 0,
204 204 WLAN_REASON_QSTA_REQUIRE_SETUP);
205 205 sta->ampdu_mlme.tid_state_rx[tid_num] |=