diff options
| author | Tillmann Heidsieck <theidsieck@leenox.de> | 2015-09-23 23:07:53 +0300 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2015-09-29 05:19:26 +0300 |
| commit | 4ccb726c728cb414d9abc65a11a6453e75204503 (patch) | |
| tree | 5b10e6733279602ccfa3e6c1d8a9a670b700f26f /include/linux | |
| parent | 174f2642349da542eb27c011e67a147773d8721f (diff) | |
| download | linux-4ccb726c728cb414d9abc65a11a6453e75204503.tar.xz | |
staging: wlan-ng fix buffer overflow in firmware handling
We test for an END marker in the element beyond the current one, this
effectively limits the size of the array to be HFA384x_PDA_LEN_MAX/2 - 1
not HFA384x_PDR_END_OF_PDA/2. This patch fixes a possible buffer
overflow in case there was no END marker.
Signed-off-by: Tillmann Heidsieck <theidsieck@leenox.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'include/linux')
0 files changed, 0 insertions, 0 deletions