]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 33b3f7a) | patch
staging: wlan-ng fix buffer overflow in firmware handling
authorTillmann Heidsieck <theidsieck@leenox.de>
Wed, 23 Sep 2015 20:07:53 +0000 (22:07 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 29 Sep 2015 02:19:26 +0000 (04:19 +0200)
commit5614d982d11f1e8dc1a2106a2bcb11a6dd0946ea
tree5b10e6733279602ccfa3e6c1d8a9a670b700f26ftree | snapshot
parent33b3f7a9d7b949e6eb4bd2077c49e3ae2829cc44commit | diff
staging: wlan-ng fix buffer overflow in firmware handling

We test for an END marker in the element beyond the current one, this
effectively limits the size of the array to be HFA384x_PDA_LEN_MAX/2 - 1
not HFA384x_PDR_END_OF_PDA/2. This patch fixes a possible buffer
overflow in case there was no END marker.

Signed-off-by: Tillmann Heidsieck <theidsieck@leenox.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/staging/wlan-ng/prism2fw.c diff | blob | history
Linux Kernel Source Tree.