]> git.baikalelectronics.ru Git - kernel.git/commit
wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()
authorDan Carpenter <dan.carpenter@oracle.com>
Fri, 15 Jul 2022 10:35:18 +0000 (13:35 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 17 Aug 2022 12:23:31 +0000 (14:23 +0200)
commit035ff97bf59fd57c12f6dd13e49fd8727f0ea363
tree0aa6baa54674fbc6d60b17e4808cd511f78aea25
parent6b19e33488cfa725a4dff585d7e2357a9f72ba9b
wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()

[ Upstream commit d248abd379abe1cf5dac2700fcedaea0d453c96d ]

The simple_write_to_buffer() function will succeed if even a single
byte is initialized.  However, we need to initialize the whole buffer
to prevent information leaks.  Just use memdup_user().

Fixes: e176ba5ffdf8 ("wil6210: debugfs interface to send raw WMI command")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Kalle Valo <quic_kvalo@quicinc.com>
Link: https://lore.kernel.org/r/Ysg14NdKAZF/hcNG@kili
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/net/wireless/ath/wil6210/debugfs.c