]> git.baikalelectronics.ru Git - kernel.git/commit
libertas_tf: prevent underflow in process_cmdrequest()
authorDan Carpenter <dan.carpenter@oracle.com>
Tue, 14 Aug 2018 09:07:48 +0000 (12:07 +0300)
committerKalle Valo <kvalo@codeaurora.org>
Fri, 31 Aug 2018 15:43:36 +0000 (18:43 +0300)
commitf431d31b731a52590bde3d5aeeda94c8210b407f
treea23bddefdb4f2287260537d21bc3c110cc45ceee
parent5e76ee59aee2e0bcc3202a96eb2ee7a221facea8
libertas_tf: prevent underflow in process_cmdrequest()

If recvlength is less than MESSAGE_HEADER_LEN (4) we would end up
corrupting memory.

Fixes: aedc8d4ddf10 ("libertas_tf: usb specific functions")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
drivers/net/wireless/marvell/libertas_tf/if_usb.c