Commit bf5238b2 authored by Felix Fietkau's avatar Felix Fietkau
Browse files

mt76: add sanity check for a-mpdu rx wcid index 



Avoid dereferencing invalid ids

Signed-off-by: default avatarFelix Fietkau <nbd@nbd.name>
parent 237312c5

drivers/net/wireless/mediatek/mt76/mac80211.c

+1 −1
Original line number Diff line number Diff line
@@ -644,7 +644,7 @@ mt76_airtime_flush_ampdu(struct mt76_dev *dev) 
		return;



	wcid_idx = dev->rx_ampdu_status.wcid_idx;

	if (dev->rx_ampdu_status.wcid_idx != 0xff)

	if (wcid_idx < ARRAY_SIZE(dev->wcid))

		wcid = rcu_dereference(dev->wcid[wcid_idx]);

	else

		wcid = NULL;

CRA Git | Maintained and supported by SUSTech CRA and CCSE