From d445950686106c52c5af6cd479221fef74d01501 Mon Sep 17 00:00:00 2001
From: Felix Fietkau <nbd@openwrt.org>
Date: Fri, 13 Mar 2015 08:16:50 +0100
Subject: [PATCH] mac: fix ba_size off-by-one

Signed-off-by: Felix Fietkau <nbd@openwrt.org>
---
 mac.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mac.c b/mac.c
index 3b0440dd..1786b518 100644
--- a/mac.c
+++ b/mac.c
@@ -201,7 +201,7 @@ void mt76_mac_write_txwi(struct mt76_dev *dev, struct mt76_txwi *txwi,
 	if ((info->flags & IEEE80211_TX_CTL_AMPDU) && sta) {
 		u8 ba_size = IEEE80211_MIN_AMPDU_BUF;
 		ba_size <<= sta->ht_cap.ampdu_factor;
-		ba_size = min_t(int, 63, ba_size);
+		ba_size = min_t(int, 63, ba_size - 1);
 		if (info->flags & IEEE80211_TX_CTL_RATE_CTRL_PROBE)
 			ba_size = 0;
 		txwi->ack_ctl |= MT76_SET(MT_TXWI_ACK_CTL_BA_WINDOW, ba_size);