DragonFlyBSD Kernel Audit
DF-1675 / fix.diff
← back to finding ↓ download raw
--- a/sys/dev/netif/ath/ath_hal/ar5416/ar5416_ani.c
+++ b/sys/dev/netif/ath/ath_hal/ar5416/ar5416_ani.c
@@ -227,6 +227,8 @@
 		u_int level = param;
 
 		HALDEBUG(ah, HAL_DEBUG_ANI, "%s: HAL_ANI_NOISE_IMMUNITY_LEVEL: set level = %d\n", __func__, level);
+		if (level > nitems(params->totalSizeDesired))
+			return AH_FALSE;
 		if (level > params->maxNoiseImmunityLevel) {
 			HALDEBUG(ah, HAL_DEBUG_ANI,
 			    "%s: immunity level out of range (%u > %u)\n",