linux-imx/drivers/net
Dan Carpenter 5d3ecc8aa8 ath9k_htc: Add a sanity check in ath9k_htc_ampdu_action()
commit 413fd2f5c0 upstream.

Smatch generates a warning here:

    drivers/net/wireless/ath/ath9k/htc_drv_main.c:1688 ath9k_htc_ampdu_action()
    error: buffer overflow 'ista->tid_state' 8 <= 15

I don't know if it's a real bug or not but the other paths through this
function all ensure that "tid" is less than ATH9K_HTC_MAX_TID (8) so
checking here makes things more consistent.

Fixes: fb9987d0f7 ("ath9k_htc: Support for AR9271 chipset.")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Kalle Valo <kvalo@qca.qualcomm.com>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
2018-06-01 00:30:05 +01:00
..
appletalk
arcnet arcnet: cleanup sizeof parameter 2013-09-10 01:57:06 +01:00
bonding bonding: prevent out of bound accesses 2016-08-22 22:37:17 +01:00
caif caif: fix NULL pointer check 2012-08-19 18:15:23 +01:00
can can: esd_usb2: cancel urb on -EPIPE and -EPROTO 2018-03-03 15:50:45 +00:00
cris
ethernet atp: remove set_rx_mode_8012() 2018-03-19 18:58:25 +00:00
fddi
hamradio hamradio/yam: fix info leak in ioctl 2014-02-15 19:20:09 +00:00
hippi net: drivers/net/hippi/Kconfig should be sourced 2011-11-09 15:55:06 -05:00
irda net: irda: irda-usb: fix firmware name on big-endian hosts 2017-09-15 18:30:40 +01:00
phy net: phy: marvell: Limit 88m1101 autoneg errata to 88E1145 as well. 2018-03-03 15:50:48 +00:00
plip
ppp pppoe: take ->needed_headroom of lower device into account on xmit 2018-03-03 15:51:03 +00:00
slip slip: sl_alloc(): remove unused parameter "dev_t line" 2018-06-01 00:30:04 +01:00
tokenring
usb net: cdc_ether: fix divide by 0 on bad descriptors 2017-11-26 13:51:11 +00:00
vmxnet3 vmxnet3: fix building without CONFIG_PCI_MSI 2014-04-02 00:58:59 +01:00
wan farsync: fix off-by-one bug in fst_add_one 2016-05-01 00:05:27 +02:00
wimax net: wimax/i2400m: fix NULL-deref at probe 2017-07-18 18:38:32 +01:00
wireless ath9k_htc: Add a sanity check in ath9k_htc_ampdu_action() 2018-06-01 00:30:05 +01:00
xen-netback xen-netback: use RING_COPY_REQUEST() throughout 2016-01-22 21:40:06 +00:00
dummy.c dummy: fix oops when loading the dummy failed 2013-08-02 22:14:49 +02:00
eql.c
ifb.c ifb: Include <linux/sched.h> 2013-09-10 01:57:03 +01:00
Kconfig drivers/net: macvtap and tun depend on INET 2015-01-01 01:27:52 +00:00
LICENSE.SRC
loopback.c net: loopback: fix a dst refcounting issue 2013-02-20 03:15:34 +00:00
macvlan.c macvlan: fix leak in macvlan_handle_frame 2015-12-30 02:25:56 +00:00
macvtap.c tun/tap: sanitize TUNSETSNDBUF input 2018-01-01 20:51:00 +00:00
Makefile
mdio.c
mii.c
netconsole.c netconsole: don't call __netpoll_cleanup() while atomic 2013-03-27 02:41:05 +00:00
rionet.c rapidio/rionet: fix deadlock on SMP 2016-05-01 00:05:20 +02:00
sb1000.c
Space.c
sungem_phy.c
tun.c tun/tap: sanitize TUNSETSNDBUF input 2018-01-01 20:51:00 +00:00
veth.c veth: Enforce minimum size of VETH_INFO_PEER 2012-02-29 16:31:00 -08:00
virtio_net.c virtio-net: drop NETIF_F_FRAGLIST 2015-10-13 03:46:11 +01:00
xen-netfront.c xen-netfront: Delete rx_refill_timer in xennet_disconnect_backend() 2017-03-16 02:18:49 +00:00