mwifiex: memory corruption in mwifiex_tdls_add_vht_capab()

[firefly-linux-kernel-4.4.55.git] / drivers / net / wireless / mwifiex / tdls.c

diff --git a/drivers/net/wireless/mwifiex/tdls.c b/drivers/net/wireless/mwifiex/tdls.c
index 5efd456af5715380c363106b1d2eee47ea77ffd0..1ba2a16ee47143845f97837a66851d44589c2292 100644 (file)
--- a/drivers/net/wireless/mwifiex/tdls.c
+++ b/drivers/net/wireless/mwifiex/tdls.c
@@ -180,7 +180,7 @@ static int mwifiex_tdls_add_vht_capab(struct mwifiex_private *priv,
        memset(&vht_cap, 0, sizeof(struct ieee80211_vht_cap));
 
        mwifiex_fill_vht_cap_tlv(priv, &vht_cap, priv->curr_bss_params.band);
-       memcpy(pos, &vht_cap, sizeof(struct ieee80211_ht_cap));
+       memcpy(pos, &vht_cap, sizeof(vht_cap));
 
        return 0;
 }