Commit 57a45e2f authored by P Praneesh's avatar P Praneesh Committed by Jeff Johnson
Browse files

wifi: ath12k: Fix adding a MSDU length validation for tkip mic error



In the wbm error path, while processing TKIP MIC errors, msdu_len is
fetched from the hal_rx_desc's msdu_end. This msdu_len is directly
passed to skb_put without validation.

In the stretch test scenario, some descriptors received are invalid
and contain junk values, leading to an msdu_len that is higher than
the actual MSDU data size.

To fix this, add a check to drop the skb when the calculated msdu_len
is greater than the skb size.

Signed-off-by: default avatarP Praneesh <quic_ppranees@quicinc.com>
Signed-off-by: default avatarNithyanantham Paramasivam <quic_nithp@quicinc.com>
Signed-off-by: default avatarRaj Kumar Bhagat <quic_rajkbhag@quicinc.com>
Signed-off-by: default avatarJeff Johnson <jeff.johnson@oss.qualcomm.com>
parent 502836cf
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment