diff options
| author | Hante Meuleman <hante.meuleman@broadcom.com> | 2016-09-19 14:09:58 +0300 |
|---|---|---|
| committer | Kalle Valo <kvalo@codeaurora.org> | 2016-09-26 20:35:55 +0300 |
| commit | a7ed7828ecda0c2b5e0d7f55dedd4230afd4b583 (patch) | |
| tree | c54fc83075e4fa6816d93487f5f705007c702598 /net/lapb/lapb_timer.c | |
| parent | 2b7425f3629b38c438f890c20c5faeca64b144ff (diff) | |
| download | linux-a7ed7828ecda0c2b5e0d7f55dedd4230afd4b583.tar.xz | |
brcmfmac: fix out of bound access on clearing wowl wake indicator
Clearing the wowl wakeindicator happens with a rather odd
construction where the string "clear" is used to set the iovar
wowl_wakeind. This was implemented incorrectly as it caused an
out of bound access. Use an intermediate variable of correct
length and copy string in that. Problem was found using coverity.
Reviewed-by: Arend Van Spriel <arend.vanspriel@broadcom.com>
Reviewed-by: Franky Lin <franky.lin@broadcom.com>
Reviewed-by: Pieter-Paul Giesberts <pieter-paul.giesberts@broadcom.com>
Signed-off-by: Hante Meuleman <hante.meuleman@broadcom.com>
Signed-off-by: Arend van Spriel <arend.vanspriel@broadcom.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Diffstat (limited to 'net/lapb/lapb_timer.c')
0 files changed, 0 insertions, 0 deletions