From: <viro@parcelfarce.linux.theplanet.co.uk>

But Al fixed it again.

Signed-off-by: Andrew Morton <akpm@osdl.org>
---

 25-akpm/drivers/net/wireless/airo.c |    2 ++
 1 files changed, 2 insertions(+)

diff -puN drivers/net/wireless/airo.c~airo-broke drivers/net/wireless/airo.c
--- 25/drivers/net/wireless/airo.c~airo-broke	2004-06-19 16:27:39.235766552 -0700
+++ 25-akpm/drivers/net/wireless/airo.c	2004-06-19 16:27:39.244765184 -0700
@@ -4505,6 +4505,8 @@ static ssize_t proc_read( struct file *f
 		len = priv->readlen - pos;
 	if (copy_to_user(buffer, priv->rbuffer + pos, len))
 		return -EFAULT;
+	if (pos + len > priv->writelen)
+		priv->writelen = pos + len;
 	*offset = pos + len;
 	return len;
 }
_