diff options
author | Dan Carpenter <dan.carpenter@oracle.com> | 2022-04-09 09:12:25 +0300 |
---|---|---|
committer | Kalle Valo <quic_kvalo@quicinc.com> | 2022-04-23 12:32:18 +0300 |
commit | 2dc509305cf956381532792cb8dceef2b1504765 (patch) | |
tree | 2920a8d20cea81d003ee55de7a3458bc2faf7ef9 /tools/perf/scripts/python/export-to-sqlite.py | |
parent | 45286070e9e782f2f53b5272a227fc879fbda2c8 (diff) | |
download | linux-2dc509305cf956381532792cb8dceef2b1504765.tar.xz |
ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix
The "rxstatus->rs_keyix" eventually gets passed to test_bit() so we need to
ensure that it is within the bitmap.
drivers/net/wireless/ath/ath9k/common.c:46 ath9k_cmn_rx_accept()
error: passing untrusted data 'rx_stats->rs_keyix' to 'test_bit()'
Fixes: 4ed1a8d4a257 ("ath9k_htc: use ath9k_cmn_rx_accept")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Toke Høiland-Jørgensen <toke@toke.dk>
Signed-off-by: Kalle Valo <quic_kvalo@quicinc.com>
Link: https://lore.kernel.org/r/20220409061225.GA5447@kili
Diffstat (limited to 'tools/perf/scripts/python/export-to-sqlite.py')
0 files changed, 0 insertions, 0 deletions