mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-11-01 17:08:10 +00:00
wlan-ng: add a bounds check
I'm not sure where these results come from, but it can't hurt to add a sanity check the array offset. The .results[] array on the next line has HFA384x_CHINFORESULT_MAX (16) elements. Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
This commit is contained in:
parent
a0cdd2e4a9
commit
72c1c06d91
1 changed files with 3 additions and 0 deletions
|
@ -1170,6 +1170,9 @@ static void prism2sta_inf_chinforesults(wlandevice_t *wlandev,
|
|||
result = &inf->info.chinforesult.result[n];
|
||||
chan = le16_to_cpu(result->chid) - 1;
|
||||
|
||||
if (chan < 0 || chan >= HFA384x_CHINFORESULT_MAX)
|
||||
continue;
|
||||
|
||||
chinforesult = &hw->channel_info.results.result[chan];
|
||||
chinforesult->chid = chan;
|
||||
chinforesult->anl = le16_to_cpu(result->anl);
|
||||
|
|
Loading…
Reference in a new issue