Blame SOURCES/0026-rtw89-coex-correct-C2H-header-length.patch

56e3f4
From a0606ee9846a9c9937a46717b18440cf6bad87f8 Mon Sep 17 00:00:00 2001
56e3f4
From: =?UTF-8?q?=C3=8D=C3=B1igo=20Huguet?= <ihuguet@redhat.com>
56e3f4
Date: Fri, 21 Jan 2022 08:49:04 +0100
56e3f4
Subject: [PATCH 26/36] rtw89: coex: correct C2H header length
56e3f4
MIME-Version: 1.0
56e3f4
Content-Type: text/plain; charset=UTF-8
56e3f4
Content-Transfer-Encoding: 8bit
56e3f4
56e3f4
Bugzilla: http://bugzilla.redhat.com/2033291
56e3f4
56e3f4
commit b3131a41ac6fcda0a636b3c7d1e05914107d8840
56e3f4
Author: Ching-Te Ku <ku920601@realtek.com>
56e3f4
Date:   Thu Dec 9 16:32:23 2021 +0800
56e3f4
56e3f4
    rtw89: coex: correct C2H header length
56e3f4
56e3f4
    To resolve C2H handle length mismatch, or it will parse the c2h content
56e3f4
    out of array.
56e3f4
56e3f4
    Signed-off-by: Ching-Te Ku <ku920601@realtek.com>
56e3f4
    Signed-off-by: Ping-Ke Shih <pkshih@realtek.com>
56e3f4
    Signed-off-by: Kalle Valo <kvalo@kernel.org>
56e3f4
    Link: https://lore.kernel.org/r/20211209083229.10815-2-pkshih@realtek.com
56e3f4
56e3f4
Signed-off-by: Íñigo Huguet <ihuguet@redhat.com>
56e3f4
---
56e3f4
 drivers/net/wireless/realtek/rtw89/coex.c | 2 ++
56e3f4
 1 file changed, 2 insertions(+)
56e3f4
56e3f4
diff --git a/drivers/net/wireless/realtek/rtw89/coex.c b/drivers/net/wireless/realtek/rtw89/coex.c
56e3f4
index abe4b6549ab2..f220229a7a48 100644
56e3f4
--- a/drivers/net/wireless/realtek/rtw89/coex.c
56e3f4
+++ b/drivers/net/wireless/realtek/rtw89/coex.c
56e3f4
@@ -4494,6 +4494,8 @@ void rtw89_btc_c2h_handle(struct rtw89_dev *rtwdev, struct sk_buff *skb,
56e3f4
 	struct rtw89_btc_btf_fwinfo *pfwinfo = &btc->fwinfo;
56e3f4
 	u8 *buf = &skb->data[RTW89_C2H_HEADER_LEN];
56e3f4
 
56e3f4
+	len -= RTW89_C2H_HEADER_LEN;
56e3f4
+
56e3f4
 	rtw89_debug(rtwdev, RTW89_DBG_BTC,
56e3f4
 		    "[BTC], %s(): C2H BT len:%d class:%d fun:%d\n",
56e3f4
 		    __func__, len, class, func);
56e3f4
-- 
56e3f4
2.13.6
56e3f4