Michal Kazior 9936194437 ath10k: sanitize tx ring index access properly ...

The tx ring index was immediately trimmed with a
bitmask. This discarded the 0xFFFFFFFF error case
(which theoretically can happen when a device is
abruptly disconnected) and led to using an invalid
tx ring index. This could lead to memory
corruption.

Signed-off-by: Michal Kazior <michal.kazior@tieto.com>
Signed-off-by: Kalle Valo <kvalo@qca.qualcomm.com>

2014-07-15 11:19:45 +03:00

33 KiB

Raw Blame History

View Raw