mirror of
https://github.com/FEX-Emu/linux.git
synced 2024-12-29 13:00:35 +00:00
dd173abfea
"param->u.wpa_associate.wpa_ie_len" comes from the user. We should check it so that the copy_from_user() doesn't overflow the buffer. Also further down in the function, we assume that if "param->u.wpa_associate.wpa_ie_len" is set then "abyWPAIE[0]" is initialized. To make that work, I changed the test here to say that if "wpa_ie_len" is set then "wpa_ie" has to be a valid pointer or we return -EINVAL. Oddly, we only use the first element of the abyWPAIE[] array. So I suspect there may be some other issues in this function. Signed-off-by: Dan Carpenter <error27@gmail.com> Cc: stable <stable@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de> |
||
|---|---|---|
| .. | ||
| adis16255 | ||
| asus_oled | ||
| batman-adv | ||
| comedi | ||
| crystalhd | ||
| cx25821 | ||
| cxt1e1 | ||
| dream | ||
| dt3155v4l | ||
| easycap | ||
| echo | ||
| et131x | ||
| frontier | ||
| go7007 | ||
| hv | ||
| iio | ||
| line6 | ||
| lirc | ||
| memrar | ||
| mrst-touchscreen | ||
| msm | ||
| octeon | ||
| otus | ||
| panel | ||
| phison | ||
| pohmelfs | ||
| quatech_usb2 | ||
| quickstart | ||
| rt2860 | ||
| rt2870 | ||
| rtl8187se | ||
| rtl8192e | ||
| rtl8192su | ||
| rtl8192u | ||
| samsung-laptop | ||
| serqt_usb2 | ||
| slicoss | ||
| sm7xx | ||
| solo6x10 | ||
| spectra | ||
| ti-st | ||
| tidspbridge | ||
| tm6000 | ||
| udlfb | ||
| usbip | ||
| vme | ||
| vt6655 | ||
| vt6656 | ||
| winbond | ||
| wlags49_h2 | ||
| wlags49_h25 | ||
| wlan-ng | ||
| xgifb | ||
| zram | ||
| Kconfig | ||
| Makefile | ||
| staging.c | ||