]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 3f5a19c) | patch
iwlwifi: mvm: fix possible out-of-bounds read when accessing lq_info
authorGregory Greenman <gregory.greenman@intel.com>
Mon, 8 Jul 2019 06:07:42 +0000 (09:07 +0300)
committerJohannes Berg <johannes.berg@intel.com>
Tue, 30 Jul 2019 16:34:27 +0000 (18:34 +0200)
commit196acb5c2e174e0a3005c4b391be825a2f963cfd
tree8fb7d62f22e5e481de8c41214d8bc4781268cdbetree | snapshot
parent3f5a19ca3ef7f3dc9309cbe700d56bec58d5d26bcommit | diff
iwlwifi: mvm: fix possible out-of-bounds read when accessing lq_info

lq_info is an arary of size 2, active_tbl index is u8.
When accessing lq_info[1 - active_tbl], theoretically it's possible
that the access will be made to a negative index value.

Signed-off-by: Gregory Greenman <gregory.greenman@intel.com>
Signed-off-by: Luca Coelho <luciano.coelho@intel.com>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
drivers/net/wireless/intel/iwlwifi/mvm/rs.c diff | blob | history
Linux Kernel Source Tree.