• Luca Coelho's avatar
    iwlwifi: mvm: check for n_profiles validity in EWRD ACPI · 2e1976bb
    Luca Coelho authored
    When reading the profiles from the EWRD table in ACPI, we loop over
    the data and set it into our internal table.  We use the number of
    profiles specified in ACPI without checking its validity, so if the
    ACPI table is corrupted and the number is larger than our array size,
    we will try to make an out-of-bounds access.
    
    Fix this by making sure the value specified in the ACPI table is
    valid.
    
    Fixes: 69964905 ("iwlwifi: mvm: add support for EWRD (Dynamic SAR) ACPI table")
    Signed-off-by: default avatarLuca Coelho <luciano.coelho@intel.com>
    2e1976bb
fw.c 33.3 KB