From: Dan Carpenter <error27@xxxxxxxxx> Date: Sat, 4 Sep 2010 15:14:35 +0200 > This is an off by one. We would go past the end when we NUL terminate > the "value" string at end of the function. The "value" buffer is > allocated in irlan_client_parse_response() or > irlan_provider_parse_command(). > > CC: stable@xxxxxxxxxx > Signed-off-by: Dan Carpenter <error27@xxxxxxxxx> Applied. -- To unsubscribe from this list: send the line "unsubscribe kernel-janitors" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html