| commit | 514ea05b0743435bf181c41f48d83aac050cc6fa | [log] [tgz] |
|---|---|---|
| author | Gregory Greenman <gregory.greenman@intel.com> | Mon Jul 08 09:07:42 2019 +0300 |
| committer | Johannes Berg <johannes.berg@intel.com> | Tue Jul 30 18:34:27 2019 +0200 |
| tree | 8fb7d62f22e5e481de8c41214d8bc4781268cdbe | |
| parent | ecd09ddc1d14cca4f874151aed51a7feee3f765b [diff] |
iwlwifi: mvm: fix possible out-of-bounds read when accessing lq_info lq_info is an arary of size 2, active_tbl index is u8. When accessing lq_info[1 - active_tbl], theoretically it's possible that the access will be made to a negative index value. Signed-off-by: Gregory Greenman <gregory.greenman@intel.com> Signed-off-by: Luca Coelho <luciano.coelho@intel.com> Signed-off-by: Johannes Berg <johannes.berg@intel.com>