]> git.karo-electronics.de Git - karo-tx-linux.git/commit
rt2800usb: Added rx packet length validity check
authorSergei Poselenov <sposelenov@emcraft.com>
Sun, 2 Sep 2012 09:14:32 +0000 (13:14 +0400)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 2 Oct 2012 17:30:20 +0000 (10:30 -0700)
commit1f92c25123b256e3c8d892fcb0d71760445ccb90
tree9d61e156d7d84ffda64ae3d49fe82c72368ea987
parentadc7b2b36a6fb6854f2146d86f08d362b6aa0b83
rt2800usb: Added rx packet length validity check

commit efd5d6b03bd9c9e0df646c56fb5f4f3e25e5c1ac upstream.

On our system (ARM Cortex-M3 SOC running linux-2.6.33)
frequent crashes were observed in the rt2800usb module
because of the invalid length of the received packet (3392,
46920...). This patch adds the sanity check on the packet
legth. Also, changed WARNING to ERROR in rt2x00lib_rxdone()
so that the bad packet condition would be noticed.

The fix was tested on the latest compat-wireless-3.5.1-1-snpc.

Signed-off-by: Sergei Poselenov <sposelenov@emcraft.com>
Acked-by: Ivo van Doorn <IvDoorn@gmail.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/net/wireless/rt2x00/rt2800usb.c
drivers/net/wireless/rt2x00/rt2x00dev.c