iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

mt76: add sanity check for a-mpdu rx wcid index

Browse Source 
Avoid dereferencing invalid ids

Signed-off-by: Felix Fietkau <nbd@nbd.name>
This commit is contained in:
Felix Fietkau 2019-10-10 21:59:46 +02:00
parent 237312c5e4
commit bf5238b25a
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
drivers/net/wireless/mediatek/mt76/mac80211.c
View File

@ -644,7 +644,7 @@ mt76_airtime_flush_ampdu(struct mt76_dev *dev)
return; return;
wcid_idx = dev->rx_ampdu_status.wcid_idx; wcid_idx = dev->rx_ampdu_status.wcid_idx;
if (dev->rx_ampdu_status.wcid_idx != 0xff) if (wcid_idx < ARRAY_SIZE(dev->wcid))
wcid = rcu_dereference(dev->wcid[wcid_idx]); wcid = rcu_dereference(dev->wcid[wcid_idx]);
else else
wcid = NULL; wcid = NULL;