| Message ID | 20211208095341.47777-1-zhangyue1@kylinos.cn |
|---|---|
| State | New |
| Headers | show |
| Series | rsi: fix array out of bound | expand |
zhangyue <zhangyue1@kylinos.cn> wrote: > Limit the max of 'ii'. If 'ii' greater than or > equal to 'RSI_MAX_VIFS', the array 'adapter->vifs' > may be out of bound > > Signed-off-by: zhangyue <zhangyue1@kylinos.cn> Patch applied to wireless-drivers-next.git, thanks. 4d375c2e51d5 rsi: fix array out of bound
diff --git a/drivers/net/wireless/rsi/rsi_91x_mac80211.c b/drivers/net/wireless/rsi/rsi_91x_mac80211.c index e70c1c7fdf59..913e11fb3807 100644 --- a/drivers/net/wireless/rsi/rsi_91x_mac80211.c +++ b/drivers/net/wireless/rsi/rsi_91x_mac80211.c @@ -1108,6 +1108,9 @@ static int rsi_mac80211_ampdu_action(struct ieee80211_hw *hw, break; } + if (ii >= RSI_MAX_VIFS) + return status; + mutex_lock(&common->mutex); if (ssn != NULL)
Limit the max of 'ii'. If 'ii' greater than or equal to 'RSI_MAX_VIFS', the array 'adapter->vifs' may be out of bound Signed-off-by: zhangyue <zhangyue1@kylinos.cn> --- drivers/net/wireless/rsi/rsi_91x_mac80211.c | 3 +++ 1 file changed, 3 insertions(+)