Hi Dan, Thanks for the patch. > -----Original Message----- > From: Dan Carpenter [mailto:dan.carpenter@xxxxxxxxxx] > Sent: Wednesday, October 19, 2011 12:32 AM > To: Bing Zhao > Cc: John W. Linville; linux-wireless@xxxxxxxxxxxxxxx; kernel-janitors@xxxxxxxxxxxxxxx > Subject: [patch 3/4 v2] mwifiex: prevent corruption instead of just warning > > Probably we never hit this condition, but in case we do, we may as > well put a return here instead of just printing a warning message and > then corrupting memory. The caller doesn't check the return code. > > Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx> Acked-by: Bing Zhao <bzhao@xxxxxxxxxxx> Regards, Bing > --- > v2: Use the error handling code to free the skb before returning. > > diff --git a/drivers/net/wireless/mwifiex/pcie.c b/drivers/net/wireless/mwifiex/pcie.c > index d12d440..a2f3200 100644 > --- a/drivers/net/wireless/mwifiex/pcie.c > +++ b/drivers/net/wireless/mwifiex/pcie.c > @@ -1228,9 +1228,12 @@ static int mwifiex_pcie_event_complete(struct mwifiex_adapter *adapter, > if (!skb) > return 0; > > - if (rdptr >= MWIFIEX_MAX_EVT_BD) > + if (rdptr >= MWIFIEX_MAX_EVT_BD) { > dev_err(adapter->dev, "event_complete: Invalid rdptr 0x%x\n", > rdptr); > + ret = -EINVAL; > + goto done; > + } > > /* Read the event ring write pointer set by firmware */ > if (mwifiex_read_reg(adapter, REG_EVTBD_WRPTR, &wrptr)) { -- To unsubscribe from this list: send the line "unsubscribe linux-wireless" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
