linux/drivers/net/wireless
Miaoqing Pan c5329b2d5b ath10k: fix array out-of-bounds access
If firmware reports rate_max > WMI_TPC_RATE_MAX(WMI_TPC_FINAL_RATE_MAX)
or num_tx_chain > WMI_TPC_TX_N_CHAIN, it will cause array out-of-bounds
access, so print a warning and reset to avoid memory corruption.

Tested HW: QCA9984
Tested FW: 10.4-3.9.0.2-00035

Signed-off-by: Miaoqing Pan <miaoqing@codeaurora.org>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
2019-10-14 11:34:20 +03:00
..
admtek
ath ath10k: fix array out-of-bounds access 2019-10-14 11:34:20 +03:00
atmel drivers: net: Fix Kconfig indentation 2019-09-26 08:56:17 +02:00
broadcom brcmsmac: remove duplicated if condition 2019-10-01 12:14:46 +03:00
cisco
intel Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net 2019-09-28 17:47:33 -07:00
intersil
marvell mwifiex: use 'total_ie_len' in mwifiex_update_bss_desc_with_ie() 2019-10-01 12:22:36 +03:00
mediatek mt7601u: fix bbp version check in mt7601u_wait_bbp_ready 2019-10-01 12:19:20 +03:00
quantenna
ralink drivers: net: Fix Kconfig indentation 2019-09-26 08:56:17 +02:00
realtek rtw88: remove misleading module parameter rtw_fw_support_lps 2019-10-02 07:33:50 +03:00
rsi rsi: release skb if rsi_prepare_beacon fails 2019-10-01 12:18:48 +03:00
st cw1200: Fix a signedness bug in cw1200_load_firmware() 2019-10-02 07:34:51 +03:00
ti net/wireless: Use kmemdup rather than duplicating its implementation 2019-10-02 07:16:10 +03:00
zydas zd1211rw: zd_usb: Use "%zu" to format size_t 2019-09-21 08:57:35 +03:00
Kconfig
mac80211_hwsim.c
mac80211_hwsim.h
Makefile
ray_cs.c
ray_cs.h
rayctl.h
rndis_wlan.c
virt_wifi.c
wl3501.h
wl3501_cs.c