diff options
| author | Dan Carpenter <dan.carpenter@oracle.com> | 2020-07-08 14:58:57 +0300 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2020-08-19 08:26:34 +0200 |
| commit | bc2599182f8ec577ca81a6de40349e94fb9734df (patch) | |
| tree | 079b732ee0d89864f0a2c20b58f910e972a9b43d /fs/kernfs/file.c | |
| parent | 63f6498a979a51a64dfdce9b04bceb999745a182 (diff) | |
mwifiex: Prevent memory corruption handling keys
[ Upstream commit e18696786548244914f36ec3c46ac99c53df99c3 ]
The length of the key comes from the network and it's a 16 bit number. It
needs to be capped to prevent a buffer overflow.
Fixes: 5e6e3a92b9a4 ("wireless: mwifiex: initial commit for Marvell mwifiex driver")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Ganapathi Bhat <ganapathi.bhat@nxp.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Link: https://lore.kernel.org/r/20200708115857.GA13729@mwanda
Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'fs/kernfs/file.c')
0 files changed, 0 insertions, 0 deletions