tree 99fca98ff500fedf95d68a0c6ae3772490d0d9ce
parent 841507f5c1a5d2f196afb12e95eb11914f029832
author Jussi Kivilinna <jussi.kivilinna@mbnet.fi> 1258913802 +0200
committer John W. Linville <linville@tuxdriver.com> 1259013940 -0500

rndis_wlan: fix buffer overflow in rndis_query_oid

rndis_query_oid overwrites *len which stores buffer size to return full size
of received command and then uses *len with memcpy to fill buffer with
command.

Ofcourse memcpy should be done before replacing buffer size.

Signed-off-by: Jussi Kivilinna <jussi.kivilinna@mbnet.fi>
Signed-off-by: John W. Linville <linville@tuxdriver.com>