Larry Finger
447ff88652
staging: r8712u: Fix possible out-of-bounds index with TKIP and AES keys
...
Array XGrpKey has only 2 elements and uses (keyid - 1) as the index, which
allows the possibility of memory corruption from an out-of-bounds index.
This problem was reported by a new version of smatch.
Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
2011-10-11 10:02:49 -06:00
..
2011-09-06 17:00:29 -07:00
2011-08-23 12:53:52 -07:00
2011-09-06 17:00:34 -07:00
2011-08-23 12:53:52 -07:00
2011-08-23 12:53:52 -07:00
2011-10-04 10:37:06 -07:00
2011-09-06 17:00:35 -07:00
2011-09-06 17:00:35 -07:00
2011-08-23 12:53:52 -07:00
2011-04-20 14:13:31 -07:00
2011-09-06 17:00:35 -07:00
2011-08-23 12:53:52 -07:00
2011-08-23 12:53:52 -07:00
2011-08-23 12:53:52 -07:00
2011-09-06 17:00:35 -07:00
2011-09-06 17:00:29 -07:00
2011-09-06 17:00:32 -07:00
2011-09-06 17:00:32 -07:00
2011-08-23 12:53:52 -07:00
2011-08-23 12:53:52 -07:00
2011-09-06 17:00:35 -07:00
2011-09-06 17:00:35 -07:00
2011-09-06 17:00:29 -07:00
2011-08-23 12:53:52 -07:00
2011-08-23 12:53:52 -07:00
2011-08-23 12:53:52 -07:00
2011-09-06 17:00:29 -07:00
2011-09-06 17:00:36 -07:00
2011-04-20 14:13:31 -07:00
2011-09-06 17:00:29 -07:00
2011-09-06 17:00:36 -07:00
2011-09-06 17:00:36 -07:00
2011-09-06 17:00:29 -07:00
2011-10-11 10:02:49 -06:00
2011-09-06 17:00:35 -07:00
2011-09-06 17:00:33 -07:00
2011-09-06 17:00:29 -07:00
2011-09-06 17:00:32 -07:00
2011-08-23 12:53:52 -07:00
2011-09-06 17:00:35 -07:00
2011-04-20 14:13:31 -07:00
2011-08-23 12:53:52 -07:00
2011-09-06 17:00:32 -07:00
2011-08-23 12:53:52 -07:00
2011-08-23 12:53:52 -07:00
2011-09-06 17:00:34 -07:00
2011-09-06 17:00:35 -07:00
2011-08-23 12:53:52 -07:00
2011-09-06 17:00:32 -07:00
2011-09-06 17:00:35 -07:00
2011-08-23 12:53:52 -07:00
2011-08-23 12:53:52 -07:00
2011-08-23 12:53:52 -07:00
2011-08-23 12:53:52 -07:00
2011-08-23 12:53:52 -07:00
2011-08-23 12:53:52 -07:00
2011-09-06 17:00:34 -07:00
2011-09-06 17:00:29 -07:00
2011-08-23 12:53:52 -07:00
2011-08-23 12:53:52 -07:00
2011-08-23 12:53:52 -07:00
2011-08-23 12:53:52 -07:00
2011-08-23 12:53:52 -07:00
2011-08-23 12:53:52 -07:00
2011-09-06 17:00:31 -07:00
2011-08-23 12:53:52 -07:00
2011-08-23 12:53:52 -07:00
2011-08-23 12:53:52 -07:00
2011-08-23 12:53:52 -07:00
2011-08-23 12:53:52 -07:00
2011-08-23 12:53:52 -07:00
2011-09-06 17:00:35 -07:00
2011-09-06 17:00:35 -07:00
2011-08-23 12:53:52 -07:00
2011-08-23 12:53:52 -07:00
2011-08-23 12:53:52 -07:00
2011-08-23 12:53:52 -07:00
2011-08-23 12:53:52 -07:00
2011-08-23 12:53:52 -07:00
2011-08-23 12:53:52 -07:00
2011-08-23 12:53:52 -07:00
2011-08-23 12:53:52 -07:00
2011-09-06 17:00:35 -07:00
2011-09-06 17:00:35 -07:00
2011-09-06 17:00:35 -07:00
2011-08-23 12:53:52 -07:00
2011-10-04 10:37:06 -07:00
2011-09-06 17:00:35 -07:00
2011-08-23 12:53:52 -07:00
2011-09-06 17:00:33 -07:00
2011-08-23 12:53:52 -07:00
2011-09-06 17:00:29 -07:00
2011-09-06 17:00:29 -07:00
2011-09-06 17:00:34 -07:00
2011-09-06 17:00:34 -07:00