madwifi: fix an array overrun in the rate control attach check

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@16217 3c298f89-4303-0410-b956-a3cf2f4a3e73

diff --git a/package/madwifi/patches/105-ratectl_attach.patch b/package/madwifi/patches/105-ratectl_attach.patch
index 1303acf..80aad83 100644 (file)
--- a/package/madwifi/patches/105-ratectl_attach.patch
+++ b/package/madwifi/patches/105-ratectl_attach.patch
@@ -8,7 +8,7 @@
 -              return NULL;
 +              /* pick the first available rate control module */
 +              printk(KERN_INFO "Rate control module \"%s\" not available\n", buf);
-+              for (id = 0; id < IEEE80211_RATE_MAX; id++) {
++              for (id = 0; id < IEEE80211_RATE_MAX - 1; id++) {
 +                      if (ratectls[id].attach)
 +                              break;
 +              }