cw1200: read beyond end of array in debug code
authorDan Carpenter <dan.carpenter@oracle.com>
Thu, 6 Jun 2013 07:43:00 +0000 (10:43 +0300)
committerJohn W. Linville <linville@tuxdriver.com>
Mon, 10 Jun 2013 18:41:26 +0000 (14:41 -0400)
This has only one caller and rates[] is an array with
IEEE80211_TX_MAX_RATES (4) elements.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
drivers/net/wireless/cw1200/txrx.c

index 0e40890e19935ff743c068a53dbebfaa0a78fba3..a2547473ec5ca5305a1d061a87f0c62e60658a8e 100644 (file)
@@ -190,13 +190,12 @@ static void tx_policy_build(const struct cw1200_common *priv,
                policy->retry_count += retries;
        }
 
-       pr_debug("[TX policy] Policy (%zu): %d:%d, %d:%d, %d:%d, %d:%d, %d:%d\n",
+       pr_debug("[TX policy] Policy (%zu): %d:%d, %d:%d, %d:%d, %d:%d\n",
                 count,
                 rates[0].idx, rates[0].count,
                 rates[1].idx, rates[1].count,
                 rates[2].idx, rates[2].count,
-                rates[3].idx, rates[3].count,
-                rates[4].idx, rates[4].count);
+                rates[3].idx, rates[3].count);
 }
 
 static inline bool tx_policy_is_equal(const struct tx_policy *wanted,