OSDN Git Service

brcmfmac: To fix kernel crash on out of boundary access
authorRaveendran Somu <raveendran.somu@cypress.com>
Thu, 4 Jun 2020 07:18:31 +0000 (02:18 -0500)
committerKalle Valo <kvalo@codeaurora.org>
Tue, 14 Jul 2020 09:43:41 +0000 (12:43 +0300)
commit698bae2e6ea139cd67debf7e8eb064056783b5bf
treebca9e2ffb8ea52e2704cb7badab7053bfd596984
parentf555abfe2923076315e55c275677cb42e91497c5
brcmfmac: To fix kernel crash on out of boundary access

To truncate the additional bytes, if extra bytes have been received.
Current code only have a warning and proceed without handling it.
But in one of the crash reported by DVT, these causes the
crash intermittently. So the processing is limit to the skb->len.

Signed-off-by: Raveendran Somu <raveendran.somu@cypress.com>
Signed-off-by: Chi-hsien Lin <chi-hsien.lin@cypress.com>
Signed-off-by: Wright Feng <wright.feng@cypress.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Link: https://lore.kernel.org/r/20200604071835.3842-2-wright.feng@cypress.com
drivers/net/wireless/broadcom/brcm80211/brcmfmac/fwsignal.c