mwifiex: add a bounds check in mwifiex_process_sta_rx_packet()
authorDan Carpenter <dan.carpenter@oracle.com>
Tue, 2 Apr 2019 07:03:38 +0000 (10:03 +0300)
committerKalle Valo <kvalo@codeaurora.org>
Thu, 4 Apr 2019 10:20:47 +0000 (13:20 +0300)
commit2cd2b42439ea7d1231b6b3f0eb0fe606f2ba5160
tree6629be61441e2a2584d3254291564324e4a869ca
parent003b686ace820ce2d635a83f10f2d7f9c147dabc
mwifiex: add a bounds check in mwifiex_process_sta_rx_packet()

Smatch complains that "local_rx_pd->priority" can't be trusted because
it comes from skb->data and it can go up to 255 instead of being capped
in the 0-7 range.  A few lines earlier, on the other side of the if
statement, we cap priority so it seems harmless to add a bounds check
here as well.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Brian Norris <briannorris@chromium.org>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
drivers/net/wireless/marvell/mwifiex/sta_rx.c