git.maquefel.me Git - linux.git/commit

author	Miaoqing Pan <miaoqing@codeaurora.org>
	Wed, 9 Oct 2019 08:18:08 +0000 (16:18 +0800)
committer	Kalle Valo <kvalo@codeaurora.org>
	Mon, 14 Oct 2019 08:34:20 +0000 (11:34 +0300)
commit	c5329b2d5b8b4e41be14d31ee8505b4f5607bf9b
tree	a5ffdb24c39dda8e265cd2eea2d989514db03034	tree \| snapshot
parent	a69d3bdd4d40c8f780c94b5e1983adb1cd389b59	commit \| diff

ath10k: fix array out-of-bounds access

If firmware reports rate_max > WMI_TPC_RATE_MAX(WMI_TPC_FINAL_RATE_MAX)
or num_tx_chain > WMI_TPC_TX_N_CHAIN, it will cause array out-of-bounds
access, so print a warning and reset to avoid memory corruption.

Tested HW: QCA9984
Tested FW: 10.4-3.9.0.2-00035

Signed-off-by: Miaoqing Pan <miaoqing@codeaurora.org>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>

drivers/net/wireless/ath/ath10k/debug.c		diff \| blob \| history
drivers/net/wireless/ath/ath10k/wmi.c		diff \| blob \| history

ep93xx device tree rework repo: git://git.maquefel.me/linux.git

RSS Atom