brcmfmac: Delete redundant length check
authorKevin Cernekee <cernekee@chromium.org>
Sun, 17 Sep 2017 04:08:23 +0000 (21:08 -0700)
committerRaspbian kernel package updater <root@raspbian.org>
Sat, 31 Mar 2018 14:55:29 +0000 (15:55 +0100)
brcmf_fweh_process_event() sets event->datalen to the
endian-swapped value of event_packet->msg.datalen, which is the
same as emsg.datalen.  This length is already validated in
brcmf_fweh_process_event(), so there is no need to check it
again upon dequeuing the event.

Suggested-by: Arend van Spriel <arend.vanspriel@broadcom.com>
Signed-off-by: Kevin Cernekee <cernekee@chromium.org>
drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c

index 6afcf86b9ba29aefa09ae2794e9f8f1bd06222db..27e7d38c03bad3dfa5905f39c5ee6b6cb21a18e6 100644 (file)
@@ -257,11 +257,6 @@ static void brcmf_fweh_event_worker(struct work_struct *work)
                brcmf_dbg_hex_dump(BRCMF_EVENT_ON(), event->data,
                                   min_t(u32, emsg.datalen, 64),
                                   "event payload, len=%d\n", emsg.datalen);
-               if (emsg.datalen > event->datalen) {
-                       brcmf_err("event invalid length header=%d, msg=%d\n",
-                                 event->datalen, emsg.datalen);
-                       goto event_free;
-               }
 
                /* special handling of interface event */
                if (event->code == BRCMF_E_IF) {