Off by one error in accessing bf_skbaddrff
authormentor <mentor@0192ed92-7a03-0410-a25b-9323aeb14dbd>
Sat, 10 May 2008 06:58:20 +0000 (06:58 +0000)
committermentor <mentor@0192ed92-7a03-0410-a25b-9323aeb14dbd>
Sat, 10 May 2008 06:58:20 +0000 (06:58 +0000)
Signed-off-by: Przemyslaw Bruski <pbruski@op.pl>
git-svn-id: http://madwifi-project.org/svn/madwifi/trunk@3623 0192ed92-7a03-0410-a25b-9323aeb14dbd

ath/if_ath.c

index 5d2c0e4c550e29d3e1586f78ef7a71f3b00e2ce2..6367c7b2f0b27399962c7f2a4dc70d139c95f40c 100644 (file)
@@ -8162,7 +8162,8 @@ ath_tx_start(struct net_device *dev, struct ieee80211_node *ni,
                        /* Link to the next, (i + 1)th, desc. if it exists. */
                        ds->ds_link = (tskb->next == NULL) ? 
                                0 : bf->bf_daddr + ((i + 1) * sizeof(*ds));
-                       ds->ds_data = (i == 0) ? bf->bf_skbaddr : bf->bf_skbaddrff[i];
+                       ds->ds_data = (i == 0) ?
+                               bf->bf_skbaddr : bf->bf_skbaddrff[i - 1];
 
                        ath_hal_filltxdesc(ah, ds,
                                tskb->len,              /* Segment length */