iwlwifi: mvm: validate tid and sta_id in ba_notif
authorEyal Shapira <eyal@wizery.com>
Fri, 16 Jan 2015 09:09:30 +0000 (11:09 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 6 Mar 2015 22:40:48 +0000 (14:40 -0800)
commit12faeccac04d9a018b662561204cb31c64aa3590
tree5d578febec9a546df772d4662be2001a58eaab51
parenta7596982b02d15570974252f6b1aeaf4e5589e1a
iwlwifi: mvm: validate tid and sta_id in ba_notif

commit 2cee4762c528a9bd2cdff793197bf591a2196c11 upstream.

These are coming from the FW and are used to access arrays.
Bad values can cause an out of bounds access so discard
such ba_notifs and warn.

Signed-off-by: Eyal Shapira <eyalx.shapira@intel.com>
Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/net/wireless/iwlwifi/mvm/tx.c