mirror of
https://github.com/outbackdingo/mt76.git
synced 2026-10-24 05:16:57 +00:00
Felix Fietkau
8e1889a5ba
The allocator advances the mask pointer by min / 32 words but computes the returned index relative to the shifted base, while the size bound check treats the same value as absolute. For the WED WDS range (min 256, size 272), a free slot at absolute index 256 + n marked bit 256 + n in the mask but returned n, colliding with regular WTBL entries, and the relative bound check allowed scanning far beyond the requested range. Keep the word offset in the loop index instead of shifting the mask pointer, so marking, return value and bound check all use absolute indices. Signed-off-by: Felix Fietkau <[email protected]>