diff options
| author | Dan Carpenter <dan.carpenter@oracle.com> | 2020-07-08 14:58:57 +0300 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2020-08-21 11:53:01 +0300 |
| commit | eb1b7c9cffa83eec6a92fedd31be441271187b10 (patch) | |
| tree | 6385f8e4054ec085203c543e80558f3bcade14d1 /arch | |
| parent | 5aacba0f520a00573bb8b2eb6866fb8739c1bd9c (diff) | |
| download | linux-eb1b7c9cffa83eec6a92fedd31be441271187b10.tar.xz | |
mwifiex: Prevent memory corruption handling keys
[ Upstream commit e18696786548244914f36ec3c46ac99c53df99c3 ]
The length of the key comes from the network and it's a 16 bit number. It
needs to be capped to prevent a buffer overflow.
Fixes: 5e6e3a92b9a4 ("wireless: mwifiex: initial commit for Marvell mwifiex driver")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Ganapathi Bhat <ganapathi.bhat@nxp.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Link: https://lore.kernel.org/r/20200708115857.GA13729@mwanda
Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'arch')
0 files changed, 0 insertions, 0 deletions