diff options
| author | Will Deacon <will@kernel.org> | 2019-10-04 10:51:32 +0100 |
|---|---|---|
| committer | Ben Hutchings <ben@decadent.org.uk> | 2019-11-15 00:56:56 +0000 |
| commit | e70efb76ea2eb9f08dc627d93d35a8e5c065346d (patch) | |
| tree | 51241f72da7e26db1add782c5e9534f5a1d56343 /drivers/net/wireless/rtlwifi/ps.c | |
| parent | bc3d2e9cfdc5c1b7e5ed34eb5279e47d462b4d5c (diff) | |
cfg80211: wext: avoid copying malformed SSIDs
commit 4ac2813cc867ae563a1ba5a9414bfb554e5796fa upstream.
Ensure the SSID element is bounds-checked prior to invoking memcpy()
with its length field, when copying to userspace.
Cc: Kees Cook <keescook@chromium.org>
Reported-by: Nicolas Waisman <nico@semmle.com>
Signed-off-by: Will Deacon <will@kernel.org>
Link: https://lore.kernel.org/r/20191004095132.15777-2-will@kernel.org
[adjust commit log a bit]
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
Diffstat (limited to 'drivers/net/wireless/rtlwifi/ps.c')
0 files changed, 0 insertions, 0 deletions