qcacmn: Add a tid check for RX to avoid of OOB access

Tid in RX frame header may be larger than MAX TID allowed
value, this will lead a out of boundary array access and
lead to kernel crash at last. Change is aimed to do a TID
check and discard such frame when necessary.

Change-Id: Ie9e7a1816d197d05cf845e81251ef7772721b849
CRs-Fixed: 3071743
此提交包含在:
Yu Tian
2021-11-10 19:05:40 +08:00
提交者 Madan Koyyalamudi
父節點 ade78b2c55
當前提交 ef29d92da0
共有 3 個檔案被更改,包括 12 行新增1 行删除

查看文件

@@ -6710,6 +6710,8 @@ dp_print_soc_rx_stats(struct dp_soc *soc)
DP_PRINT_STATS("Reo2rel route drop:%d",
soc->stats.rx.reo2rel_route_drop);
DP_PRINT_STATS("Rx Flush count:%d", soc->stats.rx.err.rx_flush_count);
DP_PRINT_STATS("Rx invalid TID count:%d",
soc->stats.rx.err.rx_invalid_tid_err);
}
#ifdef FEATURE_TSO_STATS