From c9813c8358d6557f9afbc91b1e537456984b5ec5 Mon Sep 17 00:00:00 2001 From: Paul Zhang Date: Mon, 9 Nov 2020 14:56:31 +0800 Subject: [PATCH] net: cnss2: Add second element to avoid OOB issue The struct coex_antenna_switch_to_mdm_resp_msg_v01_ei is missing with second element and causing OOB issue with KASAN. Change-Id: Iac53f5b4883a620f5179fe2caa7e2169d487c619 CRs-Fixed: 2814572 Signed-off-by: Paul Zhang Signed-off-by: Manikandan Mohan --- drivers/net/wireless/cnss2/coexistence_service_v01.c | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/drivers/net/wireless/cnss2/coexistence_service_v01.c b/drivers/net/wireless/cnss2/coexistence_service_v01.c index 1016226179c9..7a8d814642b2 100644 --- a/drivers/net/wireless/cnss2/coexistence_service_v01.c +++ b/drivers/net/wireless/cnss2/coexistence_service_v01.c @@ -1,5 +1,5 @@ // SPDX-License-Identifier: GPL-2.0-only -/* Copyright (c) 2019, The Linux Foundation. All rights reserved. */ +/* Copyright (c) 2019-2020, The Linux Foundation. All rights reserved. */ #include @@ -92,4 +92,9 @@ struct qmi_elem_info coex_antenna_switch_to_mdm_resp_msg_v01_ei[] = { resp), .ei_array = qmi_response_type_v01_ei, }, + { + .data_type = QMI_EOTI, + .array_type = NO_ARRAY, + .tlv_type = QMI_COMMON_TLV_TYPE, + }, };