Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.kernel > #1207366

Re: [PATCH] iwlwifi: out-of-bounds access in iwl_init_sband_channels

Show all headers | View raw

Hi,

> On 08/14/2015 03:36 AM, Adrien Schildknecht wrote:
> > Both loops of this function compare data from the 'chan' array and
> > then check if the index is valid.
> > 
> > The 2 conditions should be inverted to avoid an out-of-bounds
> > access.
> > 
> 
> Was that found by a static analyzer or any other automated tool, or
> was that the result of your very careful review?

The error has been reported by KASan:
==================================================================
BUG: KASan: out of bounds access in iwl_init_sband_channels+0x207/0x260 [iwlwifi] at addr ffff8800c2d0aac8
Read of size 4 by task modprobe/329
==================================================================

-- 
Adrien Schildknecht
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Back to linux.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

[PATCH] iwlwifi: out-of-bounds access in iwl_init_sband_channels Adrien Schildknecht <adrien+dev@schischi.me> - 2015-08-14 02:40 +0200
  Re: [PATCH] iwlwifi: out-of-bounds access in iwl_init_sband_channels "Grumbach, Emmanuel" <emmanuel.grumbach@intel.com> - 2015-08-14 06:40 +0200
    Re: [PATCH] iwlwifi: out-of-bounds access in  iwl_init_sband_channels Adrien Schildknecht <adrien+dev@schischi.me> - 2015-08-14 09:10 +0200
      Re: [PATCH] iwlwifi: out-of-bounds access in iwl_init_sband_channels Kalle Valo <kvalo@codeaurora.org> - 2015-08-14 09:20 +0200
        [PATCH v2] iwlwifi: out-of-bounds access in iwl_init_sband_channels Adrien Schildknecht <adrien+dev@schischi.me> - 2015-08-14 11:10 +0200

csiph-web