diff options
author | Dan Carpenter <dan.carpenter@oracle.com> | 2021-09-30 15:26:04 +0300 |
---|---|---|
committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2021-10-05 13:35:30 +0300 |
commit | 37f12202c5d28291ba5f83ce229771447ce9148f (patch) | |
tree | 8886efd5ad1616b153c11f9f2a240aed9dabc57d /drivers/usb/storage/uas.c | |
parent | 7ff4034e910fe00a90d985f0d05bacf60c162f02 (diff) | |
download | linux-37f12202c5d28291ba5f83ce229771447ce9148f.tar.xz |
staging: r8188eu: prevent array underflow in rtw_hal_update_ra_mask()
The problem is that "mac_id" is a u32 so this check for underflow does
not work when "mac_id" is zero. In that situation, "mac_id - 1" is
UINT_MAX instead of -1 so the condition is true. It leads to an
array underflow on the next line.
Fixes: 8cd574e6af54 ("staging: r8188eu: introduce new hal dir for RTL8188eu driver")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Link: https://lore.kernel.org/r/20210930122604.GB10068@kili
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/usb/storage/uas.c')
0 files changed, 0 insertions, 0 deletions