]> git.baikalelectronics.ru Git - kernel.git/commit
ca8210: fix mac_len negative array access
authorAlexander Aring <aahringo@redhat.com>
Fri, 17 Feb 2023 04:25:04 +0000 (23:25 -0500)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 5 Apr 2023 09:16:39 +0000 (11:16 +0200)
commitea94005ab2b3c18d0c1999c725d8d03c5c31255c
treebc72dc6d90c548e3330790c65a97c0ad8fcbff4e
parent2a7f1cbe6de16bf7d18a6d31d3ef759120bccaf0
ca8210: fix mac_len negative array access

[ Upstream commit 6c993779ea1d0cccdb3a5d7d45446dd229e610a3 ]

This patch fixes a buffer overflow access of skb->data if
ieee802154_hdr_peek_addrs() fails.

Reported-by: lianhui tang <bluetlh@gmail.com>
Signed-off-by: Alexander Aring <aahringo@redhat.com>
Link: https://lore.kernel.org/r/20230217042504.3303396-1-aahringo@redhat.com
Signed-off-by: Stefan Schmidt <stefan@datenfreihafen.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/net/ieee802154/ca8210.c