tree 5bb5700952ca24730ebd1f253353290d38a29b0e
parent 930fd35c8de88cc1ce934aa655181c4879422a37
author Amitkumar Karwar <akarwar@marvell.com> 1382480684 -0700
committer John W. Linville <linville@tuxdriver.com> 1384198736 -0500

mwifiex: fix invalid memory access in mwifiex_get_power_level()

With "while (length)" check we may end up in accessing invalid
memory in last iteration.
This patch makes sure that tlv length is not less than the length
of structure mwifiex_power_group when min/max power is calculated.

Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Amitkumar Karwar <akarwar@marvell.com>
Signed-off-by: Bing Zhao <bzhao@marvell.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>