summaryrefslogtreecommitdiff
path: root/drivers/net/wireless/broadcom/b43legacy
diff options
context:
space:
mode:
authorColin Ian King <colin.king@canonical.com>2017-09-05 19:16:58 +0100
committerKalle Valo <kvalo@codeaurora.org>2017-09-20 15:41:08 +0300
commite3ae1c7720462136aaa1119c656704bd96952f4d (patch)
treee584d8e03064145775d471ee029737bd2e937e1a /drivers/net/wireless/broadcom/b43legacy
parente31fbe1034d9066cfff0d0a4f7ce440ddf75643f (diff)
b43legacy: fix unitialized reads of ret by initializing the array to zero
The u8 char array ret is not being initialized and elements outside the range start to end contain just garbage values from the stack. This results in a later scan of the array to read potentially uninitialized values. Fix this by initializing the array to zero. This seems to have been an issue since the very first commit. Detected by CoverityScan CID#139653 ("Uninitialized scalar variable") Signed-off-by: Colin Ian King <colin.king@canonical.com> Reviewed-by: Michael Buesch <m@bues.ch> Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Diffstat (limited to 'drivers/net/wireless/broadcom/b43legacy')
-rw-r--r--drivers/net/wireless/broadcom/b43legacy/radio.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/net/wireless/broadcom/b43legacy/radio.c b/drivers/net/wireless/broadcom/b43legacy/radio.c
index 9501420340a9..eab1c9387846 100644
--- a/drivers/net/wireless/broadcom/b43legacy/radio.c
+++ b/drivers/net/wireless/broadcom/b43legacy/radio.c
@@ -280,7 +280,7 @@ u8 b43legacy_radio_aci_detect(struct b43legacy_wldev *dev, u8 channel)
u8 b43legacy_radio_aci_scan(struct b43legacy_wldev *dev)
{
struct b43legacy_phy *phy = &dev->phy;
- u8 ret[13];
+ u8 ret[13] = { 0 };
unsigned int channel = phy->channel;
unsigned int i;
unsigned int j;