kernel/drivers/net/wireless/marvell/mwifiex/11n_rxreorder.c
.. .. @@ -977,8 +977,8 @@ 977 977 } 978 978 } 979 979 980 - tlv_buf_left -= (sizeof(*tlv_rxba) + tlv_len);981 - tmp = (u8 *)tlv_rxba + tlv_len + sizeof(*tlv_rxba);980 + tlv_buf_left -= (sizeof(tlv_rxba->header) + tlv_len);981 + tmp = (u8 *)tlv_rxba + sizeof(tlv_rxba->header) + tlv_len;982 982 tlv_rxba = (struct mwifiex_ie_types_rxba_sync *)tmp; 983 983 } 984 984 }