diff options
| author | Michal Kazior <michal.kazior@tieto.com> | 2014-05-26 12:02:58 +0200 |
|---|---|---|
| committer | Kalle Valo <kvalo@qca.qualcomm.com> | 2014-05-27 12:32:02 +0300 |
| commit | 7147a13135ee717397969d33a139204dfe793022 (patch) | |
| tree | 4eedc3cdbe991c96025e9050c89d3cbc25d36b01 /drivers/net/wireless/ath/ath10k/ce.c | |
| parent | 4b81d1776092125db98301b0044476478e1e8de2 (diff) | |
| download | op-kernel-dev-7147a13135ee717397969d33a139204dfe793022.zip op-kernel-dev-7147a13135ee717397969d33a139204dfe793022.tar.gz | |
ath10k: protect src_ring state with ce_lock in tx_sg()
It was possible to read invalid state of CE ring
buffer indexes. This could lead to scatter-gather
transfer failure in mid-way and crash firmware
later by leaving garbage data on the ring.
Reported-By: Avery Pennarun <apenwarr@gmail.com>
Signed-off-by: Michal Kazior <michal.kazior@tieto.com>
Signed-off-by: Kalle Valo <kvalo@qca.qualcomm.com>
Diffstat (limited to 'drivers/net/wireless/ath/ath10k/ce.c')
0 files changed, 0 insertions, 0 deletions
