tree 91e2fcc489132257d3d33f8a4fa4576c7c97997b
parent aea63181b6fcb6b9ccde1ada9ea51be19c4015af
author Dan Carpenter <dan.carpenter@oracle.com> 1597327995 +0300
committer Greg Kroah-Hartman <gregkh@linuxfoundation.org> 1603961705 +0100

ath6kl: prevent potential array overflow in ath6kl_add_new_sta()

[ Upstream commit 54f9ab7b870934b70e5a21786d951fbcf663970f ]

The value for "aid" comes from skb->data so Smatch marks it as
untrusted.  If it's invalid then it can result in an out of bounds array
access in ath6kl_add_new_sta().

Fixes: 572e27c00c9d ("ath6kl: Fix AP mode connect event parsing and TIM updates")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Link: https://lore.kernel.org/r/20200813141315.GB457408@mwanda
Signed-off-by: Sasha Levin <sashal@kernel.org>