]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 49d8a27) | patch
cfg80211: wext: avoid copying malformed SSIDs
authorWill Deacon <will@kernel.org>
Fri, 4 Oct 2019 09:51:32 +0000 (10:51 +0100)
committerJohannes Berg <johannes.berg@intel.com>
Fri, 4 Oct 2019 12:04:08 +0000 (14:04 +0200)
commitc25adf7eb9d10d1da4ee9e02a5011093cf00e624
treece2debc1c58aec090511a3df0ac5ad9b5ef33a37tree | snapshot
parent49d8a27bdcadf64f4c31656aeeaae9a35247bdb5commit | diff
cfg80211: wext: avoid copying malformed SSIDs

Ensure the SSID element is bounds-checked prior to invoking memcpy()
with its length field, when copying to userspace.

Cc: <stable@vger.kernel.org>
Cc: Kees Cook <keescook@chromium.org>
Reported-by: Nicolas Waisman <nico@semmle.com>
Signed-off-by: Will Deacon <will@kernel.org>
Link: https://lore.kernel.org/r/20191004095132.15777-2-will@kernel.org
[adjust commit log a bit]
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
net/wireless/wext-sme.c diff | blob | history
Linux Kernel Source Tree.