qcacmn: Force invalid check for every pkt
Normally TID is obtained from MPDU start pkt and is performed invalid check. There is a chance that DUT receives an aggregated MPDU with invalid TID, TID value is not updated for the second MSDU, then it will lead to OOB access. Change is aimed to perform the check for every MSDU. Change-Id: Ie261ddbc0e9dcd10459c68d3c78e13faa70286ac CRs-Fixed: 3333265
这个提交包含在:
@@ -592,14 +592,14 @@ done:
|
||||
}
|
||||
|
||||
/* Get TID from struct cb->tid_val, save to tid */
|
||||
if (qdf_nbuf_is_rx_chfrag_start(nbuf)) {
|
||||
if (qdf_nbuf_is_rx_chfrag_start(nbuf))
|
||||
tid = qdf_nbuf_get_tid_val(nbuf);
|
||||
if (tid >= CDP_MAX_DATA_TIDS) {
|
||||
DP_STATS_INC(soc, rx.err.rx_invalid_tid_err, 1);
|
||||
dp_rx_nbuf_free(nbuf);
|
||||
nbuf = next;
|
||||
continue;
|
||||
}
|
||||
|
||||
if (qdf_unlikely(tid >= CDP_MAX_DATA_TIDS)) {
|
||||
DP_STATS_INC(soc, rx.err.rx_invalid_tid_err, 1);
|
||||
dp_rx_nbuf_free(nbuf);
|
||||
nbuf = next;
|
||||
continue;
|
||||
}
|
||||
|
||||
if (qdf_unlikely(!txrx_peer)) {
|
||||
|
在新工单中引用
屏蔽一个用户