From fd9586ccafacce8b742e2114f21e5e07229190d5 Mon Sep 17 00:00:00 2001 From: Himansu Nayak Date: Mon, 31 Jan 2022 08:07:32 +0530 Subject: [PATCH] msm: ipa3: Fix to validate the NAT table entries during NAT table init During NAT table Initialization parameter pass from HLOS, if max/zero table entries passed it was leading to out of bound read. Adding checks to validate the table entries before passing to NAT table parameter. Signed-off-by: Himansu Nayak --- drivers/platform/msm/ipa/ipa_v3/ipa_nat.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/drivers/platform/msm/ipa/ipa_v3/ipa_nat.c b/drivers/platform/msm/ipa/ipa_v3/ipa_nat.c index 8ced02501f84..3c24d13e7c76 100644 --- a/drivers/platform/msm/ipa/ipa_v3/ipa_nat.c +++ b/drivers/platform/msm/ipa/ipa_v3/ipa_nat.c @@ -1366,8 +1366,9 @@ int ipa3_nat_init_cmd( goto bail; } - if (init->table_entries == 0) { - IPAERR_RL("Table entries is zero\n"); + if (init->table_entries == 0 || + init->table_entries == U16_MAX) { + IPAERR_RL("Table entries is %d\n", init->table_entries); result = -EPERM; goto bail; }