hc
2024-01-03 2f7c68cb55ecb7331f2381deb497c27155f32faf
kernel/drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c
....@@ -1885,6 +1885,11 @@
18851885 if (ret < 0)
18861886 return ret;
18871887
1888
+ if (iwl_rx_packet_payload_len(hcmd.resp_pkt) < sizeof(*rsp)) {
1889
+ ret = -EIO;
1890
+ goto out;
1891
+ }
1892
+
18881893 rsp = (void *)hcmd.resp_pkt->data;
18891894 if (le32_to_cpu(rsp->status) != DEBUG_MEM_STATUS_SUCCESS) {
18901895 ret = -ENXIO;
....@@ -1962,6 +1967,11 @@
19621967 if (ret < 0)
19631968 return ret;
19641969
1970
+ if (iwl_rx_packet_payload_len(hcmd.resp_pkt) < sizeof(*rsp)) {
1971
+ ret = -EIO;
1972
+ goto out;
1973
+ }
1974
+
19651975 rsp = (void *)hcmd.resp_pkt->data;
19661976 if (rsp->status != DEBUG_MEM_STATUS_SUCCESS) {
19671977 ret = -ENXIO;