--- net/irda/irlan/irlan_common.c

+++ net/irda/irlan/irlan_common.c

@@ -1101,7 +1101,7 @@ int irlan_extract_param(__u8 *buf, char

memcpy(&val_len, buf+n, 2); /* To avoid alignment problems */

le16_to_cpus(&val_len); n+=2;

- if (val_len > 1016) {

+ if (val_len >= 1016) {

IRDA_DEBUG(2, "%s(), parameter length to long\n", __func__ );

return -RSP_INVALID_COMMAND_FORMAT;

}