diff options
| author | Dan Carpenter <dan.carpenter@oracle.com> | 2020-07-08 14:58:57 +0300 |
|---|---|---|
| committer | Kalle Valo <kvalo@codeaurora.org> | 2020-07-15 12:13:30 +0300 |
| commit | e18696786548244914f36ec3c46ac99c53df99c3 (patch) | |
| tree | 1f9afd91f9b29e93fa096b7eca5ba104f7a4fa8b /drivers/net/wireless/realtek/rtw88/main.c | |
| parent | 9187f4e840929161be957fc0be28c51e964f9824 (diff) | |
| download | linux-e18696786548244914f36ec3c46ac99c53df99c3.tar.xz | |
mwifiex: Prevent memory corruption handling keys
The length of the key comes from the network and it's a 16 bit number. It
needs to be capped to prevent a buffer overflow.
Fixes: 5e6e3a92b9a4 ("wireless: mwifiex: initial commit for Marvell mwifiex driver")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Ganapathi Bhat <ganapathi.bhat@nxp.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Link: https://lore.kernel.org/r/20200708115857.GA13729@mwanda
Diffstat (limited to 'drivers/net/wireless/realtek/rtw88/main.c')
0 files changed, 0 insertions, 0 deletions