mirror of
https://github.com/AuxXxilium/linux_dsm_epyc7002.git
synced 2024-12-28 11:18:45 +07:00
0b0f934e92
iwlagn_check_ratid_empty takes the tid as a parameter, but it doesn't check that it is not IWL_TID_NON_QOS. Since IWL_TID_NON_QOS = 8 and iwl_priv::tid_data is an array with 8 entries, accessing iwl_priv::tid_data[IWL_TID_NON_QOS] is a bad idea. This happened in iwlagn_rx_reply_tx. Since iwlagn_check_ratid_empty is relevant only to check whether we can open A-MPDU, this flow is irrelevant if tid is IWL_TID_NON_QOS. Call iwlagn_check_ratid_empty only inside the if (tid != IWL_TID_NON_QOS) a few lines earlier in the function. Cc: <stable@vger.kernel.org> Reported-by: Seraphime Kirkovski <kirkseraph@gmail.com> Tested-by: Seraphime Kirkovski <kirkseraph@gmail.com> Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com> Signed-off-by: Luca Coelho <luciano.coelho@intel.com> |
||
|---|---|---|
| .. | ||
| agn.h | ||
| calib.c | ||
| calib.h | ||
| commands.h | ||
| debugfs.c | ||
| dev.h | ||
| devices.c | ||
| led.c | ||
| led.h | ||
| lib.c | ||
| mac80211.c | ||
| main.c | ||
| Makefile | ||
| power.c | ||
| power.h | ||
| rs.c | ||
| rs.h | ||
| rx.c | ||
| rxon.c | ||
| scan.c | ||
| sta.c | ||
| tt.c | ||
| tt.h | ||
| tx.c | ||
| ucode.c | ||