Ticket #1334: 02_secfix-0.9.3-wmmparams-take2.patch

File 02_secfix-0.9.3-wmmparams-take2.patch, 1.0 kB (added by mrenzmann, 1 year ago)

  • madwifi-0.9.3/net80211/ieee80211_wireless.c

    old new  
    36213621{ 
    36223622        struct ieee80211vap *vap = dev->priv; 
    36233623        int *param = (int *) extra; 
    3624         int ac = (param[1] < WME_NUM_AC) ? param[1] : WME_AC_BE; 
     3624        int ac = (param[1] >= 0 && param[1] < WME_NUM_AC) ? 
     3625                param[1] : WME_AC_BE; 
    36253626        int bss = param[2];  
    36263627        struct ieee80211_wme_state *wme = &vap->iv_ic->ic_wme; 
    36273628 
    …… 
    37093710{ 
    37103711        struct ieee80211vap *vap = dev->priv; 
    37113712        int *param = (int *) extra; 
    3712         int ac = (param[1] < WME_NUM_AC) ? param[1] : WME_AC_BE; 
     3713        int ac = (param[1] >= 0 && param[1] < WME_NUM_AC) ? 
     3714                param[1] : WME_AC_BE; 
    37133715        struct ieee80211_wme_state *wme = &vap->iv_ic->ic_wme; 
    37143716        struct chanAccParams *chanParams = (param[2] == 0) ?  
    37153717                &(wme->wme_chanParams) : &(wme->wme_bssChanParams);