>> The change came in after -rc5, >> and I found 57921c31 ("libertas: Read buffer overflow") to be the >> culprit. Reverting it brings my libertas device back to life. I copied >> the author. >> >> Thanks, >> Daniel > > Ah, I think I made an error, I think tmp is too small and should be > > u8 tmp[*rates_size * ARRAY_SIZE(lbs_bg_rates) - 1]; After some sleep I realized it should be: u8 tmp[*rates_size * ARRAY_SIZE(lbs_bg_rates)]; > Sorry and thanks for testing, > > Roel -- To unsubscribe from this list: send the line "unsubscribe linux-wireless" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html