wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check
BugLink: https://bugs.launchpad.net/bugs/2085849 [ Upstream commit 9215152677d4b321801a92b06f6d5248b2b4465f ] The lookup function iwl_mvm_rcu_fw_link_id_to_link_conf() is normally called with input from the firmware, so it should use IWL_FW_CHECK() instead of WARN_ON(). Signed-off-by: Johannes Berg <johannes.berg@intel.com> Signed-off-by: Miri Korenblit <miriam.rachel.korenblit@intel.com> Link: https://patch.msgid.link/20240625194805.4ea8fb7c47d4.I1c22af213f97f69bfc14674502511c1bc504adfb@changeid Signed-off-by: Johannes Berg <johannes.berg@intel.com> Signed-off-by: Sasha Levin <sashal@kernel.org> CVE-2024-46825 Signed-off-by: Manuel Diewald <manuel.diewald@canonical.com> Signed-off-by: Roxana Nicolescu <roxana.nicolescu@canonical.com>
This commit is contained in:
committed by
Mehmet Basaran
parent
cdb64518d0
commit
e2b7b19b01
@@ -1317,7 +1317,8 @@ iwl_mvm_rcu_dereference_vif_id(struct iwl_mvm *mvm, u8 vif_id, bool rcu)
|
||||
static inline struct ieee80211_bss_conf *
|
||||
iwl_mvm_rcu_fw_link_id_to_link_conf(struct iwl_mvm *mvm, u8 link_id, bool rcu)
|
||||
{
|
||||
if (WARN_ON(link_id >= ARRAY_SIZE(mvm->link_id_to_link_conf)))
|
||||
if (IWL_FW_CHECK(mvm, link_id >= ARRAY_SIZE(mvm->link_id_to_link_conf),
|
||||
"erroneous FW link ID: %d\n", link_id))
|
||||
return NULL;
|
||||
|
||||
if (rcu)
|
||||
|
||||
Reference in New Issue
Block a user