iwlwifi: validate MPDU length against notification length
authorJohannes Berg <johannes.berg@intel.com>
Wed, 9 Dec 2020 21:16:24 +0000 (23:16 +0200)
committerLuca Coelho <luciano.coelho@intel.com>
Wed, 9 Dec 2020 22:14:14 +0000 (00:14 +0200)
commitefc0ec5afb6e1488b3bdc4bbf85533d79d7e5f9f
tree5c9ab5906333368c61f7cf9bf6efd5136e76f135
parentc6bae216907119a39e204a5011bd22e6c816cedb
iwlwifi: validate MPDU length against notification length

The MPDU contained in a notification shouldn't be larger than the
notification size itself is, validate this.

Reported-by: Haggai Abramovsky <haggai.abramovsky@intel.com>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Luca Coelho <luciano.coelho@intel.com>
Link: https://lore.kernel.org/r/iwlwifi.20201209231352.7c721ad37014.Id5746874ecfa208b60baa62691b2d9dc5dd4d89c@changeid
Signed-off-by: Luca Coelho <luciano.coelho@intel.com>
drivers/net/wireless/intel/iwlwifi/dvm/rx.c
drivers/net/wireless/intel/iwlwifi/mvm/rx.c
drivers/net/wireless/intel/iwlwifi/mvm/rxmq.c