mirror of
https://github.com/Fishwaldo/linux-bl808.git
synced 2025-06-17 20:25:19 +00:00
3d71c3f1f5
The rs_rate_from_ucode_rate() function may return -EINVAL if the rate is invalid, but none of the callsites check for the error, potentially making us access arrays with index IWL_RATE_INVALID, which is larger than the arrays, causing an out-of-bounds access. This will trigger KASAN warnings, such as the one reported in the bugzilla issue mentioned below. This fixes https://bugzilla.kernel.org/show_bug.cgi?id=200659 Cc: stable@vger.kernel.org Signed-off-by: Luca Coelho <luciano.coelho@intel.com> Signed-off-by: Kalle Valo <kvalo@codeaurora.org> |
||
|---|---|---|
| .. | ||
| binding.c | ||
| coex.c | ||
| constants.h | ||
| d3.c | ||
| debugfs-vif.c | ||
| debugfs.c | ||
| debugfs.h | ||
| fw-api.h | ||
| fw.c | ||
| led.c | ||
| mac-ctxt.c | ||
| mac80211.c | ||
| Makefile | ||
| mvm.h | ||
| nvm.c | ||
| offloading.c | ||
| ops.c | ||
| phy-ctxt.c | ||
| power.c | ||
| quota.c | ||
| rs-fw.c | ||
| rs.c | ||
| rs.h | ||
| rx.c | ||
| rxmq.c | ||
| scan.c | ||
| sf.c | ||
| sta.c | ||
| sta.h | ||
| tdls.c | ||
| testmode.h | ||
| time-event.c | ||
| time-event.h | ||
| tof.c | ||
| tof.h | ||
| tt.c | ||
| tx.c | ||
| utils.c | ||