Revision 60765a47a433d54e4744c285ad127f182dcd80aa authored by Johannes Berg on 25 October 2013, 11:06:06 UTC, committed by Emmanuel Grumbach on 25 November 2013, 21:00:19 UTC
The station ID must be valid, if it's out of range then
the array access may crash. Validate the station ID to
the array length, and also validate the drain value even
if that doesn't matter all that much.

Cc: stable@vger.kernel.org
Fixes: 8ca151b568b6 ("iwlwifi: add the MVM driver")
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
1 parent 9d8506c
History
File Mode Size
partitions
Kconfig -rw-r--r-- 3.6 KB
Kconfig.iosched -rw-r--r-- 1.6 KB
Makefile -rw-r--r-- 844 bytes
blk-cgroup.c -rw-r--r-- 28.8 KB
blk-cgroup.h -rw-r--r-- 16.7 KB
blk-core.c -rw-r--r-- 87.2 KB
blk-exec.c -rw-r--r-- 3.2 KB
blk-flush.c -rw-r--r-- 16.0 KB
blk-integrity.c -rw-r--r-- 11.6 KB
blk-ioc.c -rw-r--r-- 10.2 KB
blk-iopoll.c -rw-r--r-- 5.9 KB
blk-lib.c -rw-r--r-- 7.0 KB
blk-map.c -rw-r--r-- 8.2 KB
blk-merge.c -rw-r--r-- 13.1 KB
blk-mq-cpu.c -rw-r--r-- 2.2 KB
blk-mq-cpumap.c -rw-r--r-- 2.3 KB
blk-mq-sysfs.c -rw-r--r-- 9.2 KB
blk-mq-tag.c -rw-r--r-- 4.6 KB
blk-mq-tag.h -rw-r--r-- 894 bytes
blk-mq.c -rw-r--r-- 33.7 KB
blk-mq.h -rw-r--r-- 1.4 KB
blk-settings.c -rw-r--r-- 26.3 KB
blk-softirq.c -rw-r--r-- 4.4 KB
blk-sysfs.c -rw-r--r-- 16.0 KB
blk-tag.c -rw-r--r-- 9.8 KB
blk-throttle.c -rw-r--r-- 46.0 KB
blk-timeout.c -rw-r--r-- 5.2 KB
blk.h -rw-r--r-- 7.8 KB
bsg-lib.c -rw-r--r-- 6.0 KB
bsg.c -rw-r--r-- 23.6 KB
cfq-iosched.c -rw-r--r-- 120.5 KB
cmdline-parser.c -rw-r--r-- 4.8 KB
compat_ioctl.c -rw-r--r-- 20.8 KB
deadline-iosched.c -rw-r--r-- 11.3 KB
elevator.c -rw-r--r-- 24.1 KB
genhd.c -rw-r--r-- 44.1 KB
ioctl.c -rw-r--r-- 10.7 KB
noop-iosched.c -rw-r--r-- 2.7 KB
partition-generic.c -rw-r--r-- 14.0 KB
scsi_ioctl.c -rw-r--r-- 19.2 KB

back to top