rt2800usb: Added rx packet length validity check
authorSergei Poselenov <sposelenov@emcraft.com>
Sun, 2 Sep 2012 09:14:32 +0000 (13:14 +0400)
committerJohn W. Linville <linville@tuxdriver.com>
Wed, 5 Sep 2012 18:53:36 +0000 (14:53 -0400)
commitefd5d6b03bd9c9e0df646c56fb5f4f3e25e5c1ac
treeacb7e549799ecf6f41aa1971cca044e5e06ce4db
parenta396e10019eaf3809b0219c966865aaafec12630
rt2800usb: Added rx packet length validity check

On our system (ARM Cortex-M3 SOC running linux-2.6.33)
frequent crashes were observed in the rt2800usb module
because of the invalid length of the received packet (3392,
46920...). This patch adds the sanity check on the packet
legth. Also, changed WARNING to ERROR in rt2x00lib_rxdone()
so that the bad packet condition would be noticed.

The fix was tested on the latest compat-wireless-3.5.1-1-snpc.

Cc: stable@vger.kernel.org
Signed-off-by: Sergei Poselenov <sposelenov@emcraft.com>
Acked-by: Ivo van Doorn <IvDoorn@gmail.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
drivers/net/wireless/rt2x00/rt2800usb.c
drivers/net/wireless/rt2x00/rt2x00dev.c