]> git.baikalelectronics.ru Git - kernel.git/commit
wifi: mt76: fix coverity overrun-call in mt76_get_txpower()
authorDeren Wu <deren.wu@mediatek.com>
Sun, 27 Nov 2022 02:35:37 +0000 (10:35 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 31 Dec 2022 12:32:21 +0000 (13:32 +0100)
commit099748e8671bc18e5697ccba6f2cbf91f90e9b3f
tree6e0d06ae9623c9c484c5e7727ee728ec852334ea
parent3fc9e4c703091f034e9befbbd0d686c9fc19259e
wifi: mt76: fix coverity overrun-call in mt76_get_txpower()

[ Upstream commit 7065ad514c792e6efcdaee29207da374a396ae86 ]

Make sure the nss is valid for nss_delta array. Return zero
if the index is invalid.

Coverity message:
Event overrun-call: Overrunning callee's array of size 4 by passing
argument "n_chains" (which evaluates to 15) in call to
"mt76_tx_power_nss_delta".
int delta = mt76_tx_power_nss_delta(n_chains);

Fixes: 474e110abac0 ("mt76: fix rounding issues on converting per-chain and combined txpower")
Signed-off-by: Deren Wu <deren.wu@mediatek.com>
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/net/wireless/mediatek/mt76/mt76.h