Module Name:    src
Committed By:   jmcneill
Date:           Fri May 11 10:59:30 UTC 2018

Modified Files:
        src/sys/dev/usb: if_bwfm_usb.c

Log Message:
Fix off-by-one in rx packet processing


To generate a diff of this commit:
cvs rdiff -u -r1.5 -r1.6 src/sys/dev/usb/if_bwfm_usb.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: src/sys/dev/usb/if_bwfm_usb.c
diff -u src/sys/dev/usb/if_bwfm_usb.c:1.5 src/sys/dev/usb/if_bwfm_usb.c:1.6
--- src/sys/dev/usb/if_bwfm_usb.c:1.5	Fri May 11 07:41:11 2018
+++ src/sys/dev/usb/if_bwfm_usb.c	Fri May 11 10:59:30 2018
@@ -1,4 +1,4 @@
-/* $NetBSD: if_bwfm_usb.c,v 1.5 2018/05/11 07:41:11 maya Exp $ */
+/* $NetBSD: if_bwfm_usb.c,v 1.6 2018/05/11 10:59:30 jmcneill Exp $ */
 /* $OpenBSD: if_bwfm_usb.c,v 1.2 2017/10/15 14:55:13 patrick Exp $ */
 /*
  * Copyright (c) 2010-2016 Broadcom Corporation
@@ -485,7 +485,7 @@ bwfm_usb_rxeof(struct usbd_xfer *xfer, v
 		goto resubmit;
 	len -= sizeof(*hdr);
 	off += sizeof(*hdr);
-	if (len < hdr->data_offset << 2)
+	if (len <= hdr->data_offset << 2)
 		goto resubmit;
 	len -= hdr->data_offset << 2;
 	off += hdr->data_offset << 2;

Reply via email to