wifi: ath12k: Fix adding a MSDU length validation for tkip mic error
In the wbm error path, while processing TKIP MIC errors, msdu_len is fetched from the hal_rx_desc's msdu_end. This msdu_len is directly passed to skb_put without validation. In the stretch test scenario, some descriptors received are invalid and contain junk values, leading to an msdu_len that is higher than the actual MSDU data size. To fix this, add a check to drop the skb when the calculated msdu_len is greater than the skb size. Signed-off-by:P Praneesh <quic_ppranees@quicinc.com> Signed-off-by:
Nithyanantham Paramasivam <quic_nithp@quicinc.com> Signed-off-by:
Raj Kumar Bhagat <quic_rajkbhag@quicinc.com> Signed-off-by:
Jeff Johnson <jeff.johnson@oss.qualcomm.com>
Loading
Please sign in to comment