[PATCH ath-next] wifi: ath12k: Decrement TID on RX peer frag setup error handling

Vasanthakumar Thiagarajan quic_vthiagar at quicinc.com
Sun Jun 22 21:18:58 PDT 2025



On 5/26/2025 9:17 AM, Sarika Sharma wrote:
> From: Karthikeyan Kathirvel <quic_kathirve at quicinc.com>
> 
> Currently, TID is not decremented before peer cleanup, during error
> handling path of ath12k_dp_rx_peer_frag_setup(). This could lead to
> out-of-bounds access in peer->rx_tid[].
> 
> Hence, add a decrement operation for TID, before peer cleanup to
> ensures proper cleanup and prevents out-of-bounds access issues when
> the RX peer frag setup fails.
> 
> Found during code review. Compile tested only.
> 
> Signed-off-by: Karthikeyan Kathirvel <quic_kathirve at quicinc.com>
> Signed-off-by: Sarika Sharma <quic_sarishar at quicinc.com>

Reviewed-by: Vasanthakumar Thiagarajan <vasanthakumar.thiagarajan at oss.qualcomm.com>



More information about the ath12k mailing list