rsi: fix array out of bound
Limit the max of 'ii'. If 'ii' greater than or equal to 'RSI_MAX_VIFS', the array 'adapter->vifs' may be out of bound Signed-off-by: zhangyue <zhangyue1@kylinos.cn> Signed-off-by: Kalle Valo <kvalo@kernel.org> Link: https://lore.kernel.org/r/20211208095341.47777-1-zhangyue1@kylinos.cn
This commit is contained in:
Родитель
09ed8bfc52
Коммит
4d375c2e51
|
@ -1108,6 +1108,9 @@ static int rsi_mac80211_ampdu_action(struct ieee80211_hw *hw,
|
|||
break;
|
||||
}
|
||||
|
||||
if (ii >= RSI_MAX_VIFS)
|
||||
return status;
|
||||
|
||||
mutex_lock(&common->mutex);
|
||||
|
||||
if (ssn != NULL)
|
||||
|
|
Загрузка…
Ссылка в новой задаче