qcacmn: Add a tid check for RX to avoid of OOB access
Tid in RX frame header may be larger than MAX TID allowed value, this will lead a out of boundary array access and lead to kernel crash at last. Change is aimed to do a TID check and discard such frame when necessary. Change-Id: Ie9e7a1816d197d05cf845e81251ef7772721b849 CRs-Fixed: 3071743
此提交包含在:
@@ -6710,6 +6710,8 @@ dp_print_soc_rx_stats(struct dp_soc *soc)
|
||||
DP_PRINT_STATS("Reo2rel route drop:%d",
|
||||
soc->stats.rx.reo2rel_route_drop);
|
||||
DP_PRINT_STATS("Rx Flush count:%d", soc->stats.rx.err.rx_flush_count);
|
||||
DP_PRINT_STATS("Rx invalid TID count:%d",
|
||||
soc->stats.rx.err.rx_invalid_tid_err);
|
||||
}
|
||||
|
||||
#ifdef FEATURE_TSO_STATS
|
||||
|
新增問題並參考
封鎖使用者