Merge "msm: ipa: Fix removing the length check" (fcc0da6c) · Commits · e / devices / android_kernel_fairphone_FP3

drivers/platform/msm/ipa/ipa_v3/ipa_dp.c

+2 −3

Original line number	Diff line number	Diff line
		/* Copyright (c) 2012-2018, The Linux Foundation. All rights reserved.
		/* Copyright (c) 2012-2019, The Linux Foundation. All rights reserved.
		*
		* This program is free software; you can redistribute it and/or modify
		* it under the terms of the GNU General Public License version 2 and
		@@ -2496,8 +2496,7 @@ static int ipa3_wan_rx_pyld_hdlr(struct sk_buff *skb,

		IPA_STATS_INC_CNT(ipa3_ctx->stats.rx_pkts);
		if (status.endp_dest_idx >= ipa3_ctx->ipa_num_pipes \|\|
		status.endp_src_idx >= ipa3_ctx->ipa_num_pipes \|\|
		status.pkt_len > IPA_GENERIC_AGGR_BYTE_LIMIT * 1024) {
		status.endp_src_idx >= ipa3_ctx->ipa_num_pipes) {
		IPAERR("status fields invalid\n");
		WARN_ON(1);
		goto bail;