wifi: ath12k: fix possible out-of-bound write in ath12k_wmi_ext_hal_reg_caps()
authorBaochen Qiang <quic_bqiang@quicinc.com>
Wed, 20 Sep 2023 13:43:42 +0000 (16:43 +0300)
committerKalle Valo <quic_kvalo@quicinc.com>
Thu, 21 Sep 2023 08:02:07 +0000 (11:02 +0300)
commitb302dce3d9edea5b93d1902a541684a967f3c63c
tree6b66d26ea961cfc5e638b1767f535c4219fc076a
parentcb4c132ebfeac5962f7258ffc831caa0c4dada1a
wifi: ath12k: fix possible out-of-bound write in ath12k_wmi_ext_hal_reg_caps()

reg_cap.phy_id is extracted from WMI event and could be an unexpected value
in case some errors happen. As a result out-of-bound write may occur to
soc->hal_reg_cap. Fix it by validating reg_cap.phy_id before using it.

This is found during code review.

Compile tested only.

Signed-off-by: Baochen Qiang <quic_bqiang@quicinc.com>
Acked-by: Jeff Johnson <quic_jjohnson@quicinc.com>
Signed-off-by: Kalle Valo <quic_kvalo@quicinc.com>
Link: https://lore.kernel.org/r/20230830020716.5420-1-quic_bqiang@quicinc.com
drivers/net/wireless/ath/ath12k/wmi.c