diff options
| author | CNSS_WLAN Service <cnssbldsw@qualcomm.com> | 2018-03-13 04:35:08 -0700 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2018-03-13 04:35:08 -0700 |
| commit | d803bba226912927cd6ac18f637fb4b45f6d2918 (patch) | |
| tree | 1ee0d125db5930b6f94cc5ee8a5c817821ce15f5 | |
| parent | 5958bd775450ac886599ce02fbf6a4ba8c9c4060 (diff) | |
| parent | 1bd1aad6a81f92b989736914da8d2b023e8f1b0b (diff) | |
Merge "qcacld-2.0: Fix buffer overflow in ol_rx_in_order_indication_handler" into wlan-cld2.driver.lnx.1.0
| -rw-r--r-- | CORE/CLD_TXRX/TXRX/ol_rx.c | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/CORE/CLD_TXRX/TXRX/ol_rx.c b/CORE/CLD_TXRX/TXRX/ol_rx.c index a44a4b065b73..3a66b13dac0a 100644 --- a/CORE/CLD_TXRX/TXRX/ol_rx.c +++ b/CORE/CLD_TXRX/TXRX/ol_rx.c @@ -1412,6 +1412,13 @@ ol_rx_in_order_indication_handler( int status; adf_nbuf_t head_msdu, tail_msdu = NULL; + if (tid >= OL_TXRX_NUM_EXT_TIDS) { + TXRX_PRINT(TXRX_PRINT_LEVEL_ERR, + "%s: invalid tid, %u\n", __FUNCTION__, tid); + WARN_ON(1); + return; + } + if (pdev) { peer = ol_txrx_peer_find_by_id(pdev, peer_id); if (VOS_MONITOR_MODE == vos_get_conparam()) |