linux/drivers/net/wireless/realtek/rtlwifi/rtl8192cu
Morning Star dd39edb445 wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc()
TID getting from ieee80211_get_tid() might be out of range of array size
of sta_entry->tids[], so check TID is less than MAX_TID_COUNT. Othwerwise,
UBSAN warn:

 UBSAN: array-index-out-of-bounds in drivers/net/wireless/realtek/rtlwifi/rtl8192cu/trx.c:514:30
 index 10 is out of range for type 'rtl_tid_data [9]'

Fixes: 8ca4cdef93 ("wifi: rtlwifi: rtl8192cu: Fix TX aggregation")
Signed-off-by: Morning Star <alexbestoso@gmail.com>
Signed-off-by: Ping-Ke Shih <pkshih@realtek.com>
Link: https://patch.msgid.link/1764232628-13625-1-git-send-email-pkshih@realtek.com
2025-12-15 16:45:10 +08:00
..
def.h wifi: rtlwifi: rtl8192cu: Fix 2T2R chip type detection 2024-02-15 13:10:47 +02:00
dm.c rtlwifi: rtl8192cu: Rename RT_TRACE to rtl_dbg 2020-08-31 18:25:54 +03:00
dm.h rtlwifi: rtl8192cu: Replace old-style license information 2019-02-19 17:00:05 +02:00
hw.c wifi: rtlwifi: Use min()/max() to improve code 2025-07-18 14:41:06 +08:00
hw.h rtlwifi: rtl8192cu: Fix problems with blank lines 2019-02-28 10:30:04 +02:00
led.c wifi: rtlwifi: simplify LED management 2023-06-21 21:31:10 +03:00
led.h wifi: rtlwifi: simplify LED management 2023-06-21 21:31:10 +03:00
mac.c wifi: rtlwifi: rtl8192cu: Fix 2T2R chip type detection 2024-02-15 13:10:47 +02:00
mac.h rtlwifi: rtl8192cu: Fix problems with blank lines 2019-02-28 10:30:04 +02:00
Makefile License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00
phy.c wifi: rtlwifi: rtl8192cu: using calculate_bit_shift() 2023-12-21 16:40:16 +02:00
phy.h rtlwifi: rtl8192cu: Replace old-style license information 2019-02-19 17:00:05 +02:00
reg.h rtlwifi: rtl8192cu: Replace old-style license information 2019-02-19 17:00:05 +02:00
rf.c rtlwifi: rtl8192cu: Rename RT_TRACE to rtl_dbg 2020-08-31 18:25:54 +03:00
rf.h rtlwifi: rtl8192cu: Replace old-style license information 2019-02-19 17:00:05 +02:00
sw.c wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188 2025-08-19 09:20:09 +08:00
table.c rtlwifi: rtl8192{c,u}: Remove CamelCase variables 2019-02-19 17:02:56 +02:00
table.h rtlwifi: rtl8192{c,u}: Remove CamelCase variables 2019-02-19 17:02:56 +02:00
trx.c wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc() 2025-12-15 16:45:10 +08:00
trx.h wifi: rtlwifi: rtl8192cu: Fix TX aggregation 2024-02-21 20:54:57 +02:00