From f48e0b1e5f5a3909554756578a52b599fa073371 Mon Sep 17 00:00:00 2001
From: Felix Fietkau <nbd@openwrt.org>
Date: Sat, 30 May 2009 17:53:24 +0000
Subject: [PATCH] madwifi: fix an array overrun in the rate control attach
 check

SVN-Revision: 16217
---
 package/madwifi/patches/105-ratectl_attach.patch | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package/madwifi/patches/105-ratectl_attach.patch b/package/madwifi/patches/105-ratectl_attach.patch
index 1303acfb0d..80aad835e7 100644
--- a/package/madwifi/patches/105-ratectl_attach.patch
+++ b/package/madwifi/patches/105-ratectl_attach.patch
@@ -8,7 +8,7 @@
 -		return NULL;
 +		/* pick the first available rate control module */
 +		printk(KERN_INFO "Rate control module \"%s\" not available\n", buf);
-+		for (id = 0; id < IEEE80211_RATE_MAX; id++) {
++		for (id = 0; id < IEEE80211_RATE_MAX - 1; id++) {
 +			if (ratectls[id].attach)
 +				break;
 +		}