From: Pavel Roskin Date: Tue, 12 Nov 2013 20:55:46 +0000 (-0500) Subject: Fix off-by-one error in size parsing in proc_ratesample_open() X-Git-Url: http://git.ozo.com/?a=commitdiff_plain;h=3f778edc5f8ae8368289c57d384f0c3c3f3a533d;p=madwifi%2F.git Fix off-by-one error in size parsing in proc_ratesample_open() sizeof("string") includes the trailing 0, strlen("string") doesn't. --- diff --git a/ath_rate/sample/sample.c b/ath_rate/sample/sample.c index 5baaf8c..01ccfba 100644 --- a/ath_rate/sample/sample.c +++ b/ath_rate/sample/sample.c @@ -1050,7 +1050,7 @@ proc_ratesample_open(struct inode *inode, struct file *file) /* Determine what size packets to get stats for based on proc filename */ size = simple_strtoul(file->f_dentry->d_name.name + - sizeof("ratestats_"), NULL, 0); + strlen("ratestats_"), NULL, 0); if (size < 250 || size > 3000) return -ENOENT;