1
linux/drivers/net/wireless/ipw2x00
Dan Carpenter 92c1ff1fa7 ipw2x00: signedness bug handling frame length
This is basically just a cleanup.  Large positive numbers get counted as
negative but then get implicitly cast to positive again for the checks
that matter.

This does make a small difference in ipw_handle_promiscuous_rx() when we
test "if (unlikely((len + IPW_RX_FRAME_SIZE) > skb_tailroom(rxb->skb)))"
It should return there, but we don't return until a couple lines later
when we test "if (len > IPW_RX_BUF_SIZE - sizeof(struct ipw_rt_hdr)) {".
The difference is that in the second test the sizeof() means that there
is an implied cast to unsigned.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Stanislaw Gruszka <sgruszka@redhat.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
2012-01-13 14:40:56 -05:00
..
ipw2100.c wireless: use strlcpy routine in .get_drvinfo 2011-11-17 15:44:50 -05:00
ipw2100.h
ipw2200.c ipw2x00: signedness bug handling frame length 2012-01-13 14:40:56 -05:00
ipw2200.h
Kconfig
libipw_geo.c
libipw_module.c
libipw_rx.c
libipw_tx.c
libipw_wx.c ipw2x00: remove reset_port functionality 2012-01-04 14:30:46 -05:00
libipw.h ipw2x00: remove reset_port functionality 2012-01-04 14:30:46 -05:00
Makefile