diff options
| author | Sai Teja Aluvala <aluvala.sai.teja@intel.com> | 2026-09-11 17:22:22 +0530 |
|---|---|---|
| committer | Luiz Augusto von Dentz <luiz.von.dentz@intel.com> | 2026-09-15 14:55:27 -0400 |
| commit | 2ea5a87a5a7ae58cb2662b8a7d06f209383e1765 (patch) | |
| tree | a638c3e1b1c57dee1188e045a8cdc77d4fde9277 /tools/perf/scripts/python | |
| parent | 7b60ee5f46f2ee329de661f7c68b6818d8136220 (diff) | |
| download | linux-2ea5a87a5a7ae58cb2662b8a7d06f209383e1765.tar.gz linux-2ea5a87a5a7ae58cb2662b8a7d06f209383e1765.zip | |
Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit
btintel_pcie_submit_rx() used frbd_index > rxq->count to guard the
FRBD array access, allowing frbd_index == rxq->count to pass through
and index one element past the end of the array. Change the check to
>= rxq->count so every out-of-range index is rejected.
This issue was reported by Claude Mythos.
Fixes: c2b636b3f788 (Bluetooth: btintel_pcie: Add support for PCIe transport)
Signed-off-by: Sai Teja Aluvala <aluvala.sai.teja@intel.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Diffstat (limited to 'tools/perf/scripts/python')
0 files changed, 0 insertions, 0 deletions