diff options
| author | Bitterblue Smith <rtl8821cerfe2@gmail.com> | 2026-05-20 17:14:26 +0300 |
|---|---|---|
| committer | Ping-Ke Shih <pkshih@realtek.com> | 2026-05-27 11:43:49 +0300 |
| commit | aa7d92e83811a0b557b75f7a0ce85315f4358bf2 (patch) | |
| tree | cae90df3918ba285a10df4934cae6a1a70486f8a /include/linux/debugobjects.h | |
| parent | 756abe2ebe3e14922c6e1317c89ce8004e85b6e9 (diff) | |
| download | linux-aa7d92e83811a0b557b75f7a0ce85315f4358bf2.tar.xz | |
wifi: rtw88: Add more validation for the RX descriptor
Some RTL8821CE cards can return frames with corrupted RX descriptor,
causing warnings and crashes if they are passed to the upper layers.
The PHY status size field is 4 bits wide, but in rtw88 its value should
only be 0 or 4. Checking this catches most of the corrupt frames.
If a PHY status is present, the PHY status size should not be 0.
The frame size should not be less than or equal to 4 and should not
exceed 11454.
The rate should not exceed 4SS MCS9.
Discard the frame if any of these checks fail.
Closes: https://bugzilla.kernel.org/show_bug.cgi?id=221286
Signed-off-by: Bitterblue Smith <rtl8821cerfe2@gmail.com>
Tested-by: Oleksandr Havrylov <goainwo@gmail.com>
Acked-by: Ping-Ke Shih <pkshih@realtek.com>
Signed-off-by: Ping-Ke Shih <pkshih@realtek.com>
Link: https://patch.msgid.link/5bfecba3-8a90-4e0f-9558-af5cd8a14975@gmail.com
Diffstat (limited to 'include/linux/debugobjects.h')
0 files changed, 0 insertions, 0 deletions