wil6210: Sanity check for reported DMA length

Browse source

If Rx descriptor contains garbage, it is possible to access memory beyond
allocated buffer.

Check this condition and drop Rx if reported length is
unreasonable large

Signed-off-by: Vladimir Kondratiev <qca_vkondrat@qca.qualcomm.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>

...

This commit is contained in:

Vladimir Kondratiev 2013-05-12 14:43:33 +03:00 • committed by John W. Linville

parent 7e59444444

commit e270045b56

1 changed files with 6 additions and 2 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

8

drivers/net/wireless/ath/wil6210/txrx.c

View file