[PATCH ath-next] wifi: ath12k: Decrement TID on RX peer frag setup error handling
Vasanthakumar Thiagarajan
quic_vthiagar at quicinc.com
Sun Jun 22 21:18:58 PDT 2025
On 5/26/2025 9:17 AM, Sarika Sharma wrote:
> From: Karthikeyan Kathirvel <quic_kathirve at quicinc.com>
>
> Currently, TID is not decremented before peer cleanup, during error
> handling path of ath12k_dp_rx_peer_frag_setup(). This could lead to
> out-of-bounds access in peer->rx_tid[].
>
> Hence, add a decrement operation for TID, before peer cleanup to
> ensures proper cleanup and prevents out-of-bounds access issues when
> the RX peer frag setup fails.
>
> Found during code review. Compile tested only.
>
> Signed-off-by: Karthikeyan Kathirvel <quic_kathirve at quicinc.com>
> Signed-off-by: Sarika Sharma <quic_sarishar at quicinc.com>
Reviewed-by: Vasanthakumar Thiagarajan <vasanthakumar.thiagarajan at oss.qualcomm.com>
More information about the ath12k
mailing list