Revision 60765a47a433d54e4744c285ad127f182dcd80aa authored by Johannes Berg on 25 October 2013, 11:06:06 UTC, committed by Emmanuel Grumbach on 25 November 2013, 21:00:19 UTC
The station ID must be valid, if it's out of range then the array access may crash. Validate the station ID to the array length, and also validate the drain value even if that doesn't matter all that much. Cc: stable@vger.kernel.org Fixes: 8ca151b568b6 ("iwlwifi: add the MVM driver") Signed-off-by: Johannes Berg <johannes.berg@intel.com> Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
1 parent 9d8506c
File | Mode | Size |
---|---|---|
partitions | ||
Kconfig | -rw-r--r-- | 3.6 KB |
Kconfig.iosched | -rw-r--r-- | 1.6 KB |
Makefile | -rw-r--r-- | 844 bytes |
blk-cgroup.c | -rw-r--r-- | 28.8 KB |
blk-cgroup.h | -rw-r--r-- | 16.7 KB |
blk-core.c | -rw-r--r-- | 87.2 KB |
blk-exec.c | -rw-r--r-- | 3.2 KB |
blk-flush.c | -rw-r--r-- | 16.0 KB |
blk-integrity.c | -rw-r--r-- | 11.6 KB |
blk-ioc.c | -rw-r--r-- | 10.2 KB |
blk-iopoll.c | -rw-r--r-- | 5.9 KB |
blk-lib.c | -rw-r--r-- | 7.0 KB |
blk-map.c | -rw-r--r-- | 8.2 KB |
blk-merge.c | -rw-r--r-- | 13.1 KB |
blk-mq-cpu.c | -rw-r--r-- | 2.2 KB |
blk-mq-cpumap.c | -rw-r--r-- | 2.3 KB |
blk-mq-sysfs.c | -rw-r--r-- | 9.2 KB |
blk-mq-tag.c | -rw-r--r-- | 4.6 KB |
blk-mq-tag.h | -rw-r--r-- | 894 bytes |
blk-mq.c | -rw-r--r-- | 33.7 KB |
blk-mq.h | -rw-r--r-- | 1.4 KB |
blk-settings.c | -rw-r--r-- | 26.3 KB |
blk-softirq.c | -rw-r--r-- | 4.4 KB |
blk-sysfs.c | -rw-r--r-- | 16.0 KB |
blk-tag.c | -rw-r--r-- | 9.8 KB |
blk-throttle.c | -rw-r--r-- | 46.0 KB |
blk-timeout.c | -rw-r--r-- | 5.2 KB |
blk.h | -rw-r--r-- | 7.8 KB |
bsg-lib.c | -rw-r--r-- | 6.0 KB |
bsg.c | -rw-r--r-- | 23.6 KB |
cfq-iosched.c | -rw-r--r-- | 120.5 KB |
cmdline-parser.c | -rw-r--r-- | 4.8 KB |
compat_ioctl.c | -rw-r--r-- | 20.8 KB |
deadline-iosched.c | -rw-r--r-- | 11.3 KB |
elevator.c | -rw-r--r-- | 24.1 KB |
genhd.c | -rw-r--r-- | 44.1 KB |
ioctl.c | -rw-r--r-- | 10.7 KB |
noop-iosched.c | -rw-r--r-- | 2.7 KB |
partition-generic.c | -rw-r--r-- | 14.0 KB |
scsi_ioctl.c | -rw-r--r-- | 19.2 KB |
Computing file changes ...