]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
iwlwifi: mvm: validate tid and sta_id in ba_notif
authorEyal Shapira <eyal@wizery.com>
Fri, 16 Jan 2015 09:09:30 +0000 (11:09 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 6 Mar 2015 22:52:45 +0000 (14:52 -0800)
commit77786bd9e96f1ce6c850d3396349bbbf7aba50f9
treec14752234ad605647029028a6ae1002945662303
parenteba54079b64a187c005373f1d659621ed1495c2d
iwlwifi: mvm: validate tid and sta_id in ba_notif

commit 2cee4762c528a9bd2cdff793197bf591a2196c11 upstream.

These are coming from the FW and are used to access arrays.
Bad values can cause an out of bounds access so discard
such ba_notifs and warn.

Signed-off-by: Eyal Shapira <eyalx.shapira@intel.com>
Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/net/wireless/iwlwifi/mvm/tx.c