]> bbs.cooldavid.org Git - net-next-2.6.git/commit
ar9170usb: fix panic triggered by undersized rxstream buffer
authorChristian Lamparter <chunkeey@googlemail.com>
Tue, 23 Mar 2010 20:51:14 +0000 (21:51 +0100)
committerJohn W. Linville <linville@tuxdriver.com>
Wed, 31 Mar 2010 18:50:51 +0000 (14:50 -0400)
commit879999cec9489f8942ebce3ec1b5f23ef948dda7
tree7eaeb70e0b0f5a81aad162764e163b8b0e7588f5
parentf9ea3eb44218b0e12a190f222400f8d56136915f
ar9170usb: fix panic triggered by undersized rxstream buffer

While ar9170's USB transport packet size is currently set to 8KiB,
the PHY is capable of receiving AMPDUs with up to 64KiB.
Such a large frame will be split over several rx URBs and
exceed the previously allocated space for rx stream reconstruction.

This patch increases the buffer size to 64KiB which is
in fact the phy & rx stream designed size limit.

Cc: stable@kernel.org
Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=15591
Reported-by: Christian Mehlis <mehlis@inf.fu-berlin.de>
Signed-off-by: Christian Lamparter <chunkeey@googlemail.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
drivers/net/wireless/ath/ar9170/hw.h
drivers/net/wireless/ath/ar9170/main.c