mirror of
https://github.com/FEX-Emu/linux.git
synced 2024-12-23 09:56:00 +00:00
7f503fc49f
Sometimes rxdesc descriptor provided by hardware contains invalid (random) data. For example rxdesc.size can be bigger than actual size of the buffer. When this happen rt2x00crypto_rx_insert_iv() corrupt memory doing memmove outside of buffer boundaries. Signed-off-by: Stanislaw Gruszka <stf_xl@wp.pl> Acked-by: Ivo van Doorn <IvDoorn@gmail.com> Signed-off-by: John W. Linville <linville@tuxdriver.com> |
||
|---|---|---|
| .. | ||
| Kconfig | ||
| Makefile | ||
| rt2x00.h | ||
| rt2x00config.c | ||
| rt2x00crypto.c | ||
| rt2x00debug.c | ||
| rt2x00debug.h | ||
| rt2x00dev.c | ||
| rt2x00dump.h | ||
| rt2x00firmware.c | ||
| rt2x00leds.c | ||
| rt2x00leds.h | ||
| rt2x00lib.h | ||
| rt2x00link.c | ||
| rt2x00mac.c | ||
| rt2x00pci.c | ||
| rt2x00pci.h | ||
| rt2x00queue.c | ||
| rt2x00queue.h | ||
| rt2x00reg.h | ||
| rt2x00soc.c | ||
| rt2x00soc.h | ||
| rt2x00usb.c | ||
| rt2x00usb.h | ||
| rt61pci.c | ||
| rt61pci.h | ||
| rt73usb.c | ||
| rt73usb.h | ||
| rt2400pci.c | ||
| rt2400pci.h | ||
| rt2500pci.c | ||
| rt2500pci.h | ||
| rt2500usb.c | ||
| rt2500usb.h | ||
| rt2800.h | ||
| rt2800lib.c | ||
| rt2800lib.h | ||
| rt2800pci.c | ||
| rt2800pci.h | ||
| rt2800usb.c | ||
| rt2800usb.h | ||