2013-01-23 00:29:46

by Bing Zhao

[permalink] [raw]
Subject: [PATCH] mwifiex: fix invalid access of PCIe RxBD ring buffer descriptor

From: Avinash Patil <[email protected]>

This patch fixes invalid access of RxBD ring buffer descriptor's
length and flag inside PCIe send_data_complete() routine. We are
supposed to modify TxBD buffer descriptor's length and flag here.

Signed-off-by: Avinash Patil <[email protected]>
Signed-off-by: Bing Zhao <[email protected]>
---
drivers/net/wireless/mwifiex/pcie.c | 4 ++--
1 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/drivers/net/wireless/mwifiex/pcie.c b/drivers/net/wireless/mwifiex/pcie.c
index 237949c..7415ac8 100644
--- a/drivers/net/wireless/mwifiex/pcie.c
+++ b/drivers/net/wireless/mwifiex/pcie.c
@@ -846,8 +846,8 @@ static int mwifiex_pcie_send_data_complete(struct mwifiex_adapter *adapter)

card->tx_buf_list[wrdoneidx] = NULL;
card->txbd_ring[wrdoneidx]->paddr = 0;
- card->rxbd_ring[wrdoneidx]->len = 0;
- card->rxbd_ring[wrdoneidx]->flags = 0;
+ card->txbd_ring[wrdoneidx]->len = 0;
+ card->txbd_ring[wrdoneidx]->flags = 0;
card->txbd_rdptr++;

if ((card->txbd_rdptr & MWIFIEX_TXBD_MASK) == num_tx_buffs)
--
1.7.0.2