linux/drivers/net/wireless/broadcom
Kevin Cernekee dd2349121b brcmfmac: Add check for short event packets
The length of the data in the received skb is currently passed into
brcmf_fweh_process_event() as packet_len, but this value is not checked.
event_packet should be followed by DATALEN bytes of additional event
data.  Ensure that the received packet actually contains at least
DATALEN bytes of additional data, to avoid copying uninitialized memory
into event->data.

Cc: <stable@vger.kernel.org> # v3.8
Suggested-by: Mattias Nissler <mnissler@chromium.org>
Signed-off-by: Kevin Cernekee <cernekee@chromium.org>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
2017-10-02 16:51:21 +03:00
..
b43 b43: Add missing MODULE_FIRMWARE() 2017-05-22 12:02:46 +03:00
b43legacy networking: introduce and use skb_put_data() 2017-06-16 11:48:37 -04:00
brcm80211 brcmfmac: Add check for short event packets 2017-10-02 16:51:21 +03:00
Kconfig
Makefile