From: Adrian Bunk <bunk@stusta.de>

This patch fixes a big array overun found by the Coverity checker.

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Cc: <yi.zhu@intel.com>
Cc: <jketreno@linux.intel.com>
Cc: "John W. Linville" <linville@tuxdriver.com>
Cc: Jeff Garzik <jeff@garzik.org>
Signed-off-by: Andrew Morton <akpm@osdl.org>
---

 drivers/net/wireless/ipw2200.c |    5 ++---
 1 files changed, 2 insertions(+), 3 deletions(-)

diff -puN drivers/net/wireless/ipw2200.c~drivers-net-wireless-ipw2200c-fix-an-array-overun drivers/net/wireless/ipw2200.c
--- devel/drivers/net/wireless/ipw2200.c~drivers-net-wireless-ipw2200c-fix-an-array-overun	2006-03-11 01:07:11.000000000 -0800
+++ devel-akpm/drivers/net/wireless/ipw2200.c	2006-03-11 01:07:11.000000000 -0800
@@ -9956,9 +9956,8 @@ static int ipw_ethtool_set_eeprom(struct
 		return -EINVAL;
 	mutex_lock(&p->mutex);
 	memcpy(&p->eeprom[eeprom->offset], bytes, eeprom->len);
-	for (i = IPW_EEPROM_DATA;
-	     i < IPW_EEPROM_DATA + IPW_EEPROM_IMAGE_SIZE; i++)
-		ipw_write8(p, i, p->eeprom[i]);
+	for (i = 0; i < IPW_EEPROM_IMAGE_SIZE; i++)
+		ipw_write8(p, i + IPW_EEPROM_DATA, p->eeprom[i]);
 	mutex_unlock(&p->mutex);
 	return 0;
 }
_