projects / platform / kernel / linux-rpi.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: dc5771d) | patch
ath10k: sanitity check for ep connectivity
authorZekun Shen <bruceshenzk@gmail.com>
Mon, 11 Jan 2021 17:49:29 +0000 (19:49 +0200)
committerKalle Valo <kvalo@codeaurora.org>
Mon, 18 Jan 2021 16:11:32 +0000 (18:11 +0200)
commitd18ba9f1351c4675948c87e33a571d28c97d53a7
treea90a8a60032d077a0b5cdaa7908c76deb911f190tree | snapshot
parentdc5771dfb27d6da7c8d866a358ff5c86e95f06c6commit | diff
ath10k: sanitity check for ep connectivity

Function ep_rx_complete is being called without NULL checking
in ath10k_htc_rx_completion_handler. Without such check, mal-
formed packet is able to cause jump to NULL.

ep->service_id seems a good candidate for sanity check as it is
used in usb.c.

Signed-off-by: Zekun Shen <bruceshenzk@gmail.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Link: https://lore.kernel.org/r/20200622022055.16028-1-bruceshenzk@gmail.com
drivers/net/wireless/ath/ath10k/htc.c diff | blob | history
Domain: System / Kernel;