diff options
| author | Tristan Madani <tristan@talencesecurity.com> | 2026-04-21 11:14:42 +0000 |
|---|---|---|
| committer | Ping-Ke Shih <pkshih@realtek.com> | 2026-04-29 13:34:14 +0800 |
| commit | 6d88244bb129755acca696f9227200f4a2d106a6 (patch) | |
| tree | 85c8f3f6ad208f58e78022f2219af106a47dc78f /tools/perf/scripts/python/export-to-sqlite.py | |
| parent | 6e76e9ed273dfb4b3333a5ebbb94958cc5752ab6 (diff) | |
wifi: rtw89: add bounds check on firmware mac_id in link lookup
The mac_id field in RX descriptors is 8 bits wide (0-255), but
assoc_link_on_macid[] has only RTW89_MAX_MAC_ID_NUM (128) entries.
While the driver currently assigns mac_id values below 128, the
descriptor value comes from firmware and is not validated before use
as an array index. Add a defensive bounds check in
rtw89_assoc_link_rcu_dereference() to guard against out-of-range
firmware values.
Fixes: 144c6cd24b35 ("wifi: rtw89: 8922a: configure AP_LINK_PS if FW supports")
Signed-off-by: Tristan Madani <tristan@talencesecurity.com>
Signed-off-by: Ping-Ke Shih <pkshih@realtek.com>
Link: https://patch.msgid.link/20260421111442.3395411-1-tristmd@gmail.com
Diffstat (limited to 'tools/perf/scripts/python/export-to-sqlite.py')
0 files changed, 0 insertions, 0 deletions