OSDN Git Service

wil6210: fix memory access violation in wil_memcpy_from/toio_32
authorDedy Lansky <dlansky@codeaurora.org>
Tue, 28 Mar 2017 18:25:42 +0000 (21:25 +0300)
committerGerrit - the friendly Code Review server <code-review@localhost>
Thu, 30 Mar 2017 06:00:32 +0000 (23:00 -0700)
commit98b0bcfa6c2ab8b4b4d5a88db5bde381bec22fe0
tree8788fa9e9049846cdcf55ac1aadb7751c910d4b1
parent4166896b94303a3f8952d9af6f06fdb7a2b1b45d
wil6210: fix memory access violation in wil_memcpy_from/toio_32

In case count is not multiple of 4, there is a read access in
wil_memcpy_toio_32() from outside src buffer boundary.
In wil_memcpy_fromio_32(), in case count is not multiple of 4, there
is a write access to outside dst io memory boundary.

Fix these issues with proper handling of the last 1 to 4 copied bytes.

Change-Id: Iff7853bc4803a01449ddcee996a54a0dccc1db1a
Signed-off-by: Dedy Lansky <dlansky@codeaurora.org>
drivers/net/wireless/ath/wil6210/main.c