Commit 013cd397532e5803a1625954a884d021653da720
Committed by
David S. Miller
1 parent
b7b45f47d6
Exists in
master
and in
7 other branches
mac80211: fix a buffer overrun in station debug code
net/mac80211/debugfs_sta.c The trailing zero was written to state[4], it's out of bounds. Signed-off-by: Jianjun Kong <jianjun@zeuux.org> Signed-off-by: David S. Miller <davem@davemloft.net>
Showing 1 changed file with 1 additions and 1 deletions Side-by-side Diff
net/mac80211/debugfs_sta.c
... | ... | @@ -199,7 +199,7 @@ |
199 | 199 | /* toggle Rx aggregation command */ |
200 | 200 | tid_num = tid_num - 100; |
201 | 201 | if (tid_static_rx[tid_num] == 1) { |
202 | - strcpy(state, "off "); | |
202 | + strcpy(state, "off"); | |
203 | 203 | ieee80211_sta_stop_rx_ba_session(sta->sdata, da, tid_num, 0, |
204 | 204 | WLAN_REASON_QSTA_REQUIRE_SETUP); |
205 | 205 | sta->ampdu_mlme.tid_state_rx[tid_num] |= |