| commit | 8503bd8c7dc6f82ec2de9d05e0a476e6ca5adc8b | [log] [tgz] |
|---|---|---|
| author | Arjan van de Ven <arjan@linux.intel.com> | Sat Sep 26 20:51:14 2009 +0200 |
| committer | John W. Linville <linville@tuxdriver.com> | Mon Sep 28 16:55:06 2009 -0400 |
| tree | 42da5de2f0ee624e675d7b27f7e8c05301de0d2d | |
| parent | 0ff716136ab73d2fc1edc0664e38169e7a76bb9a [diff] |
wext: Add bound checks for copy_from_user The wireless extensions have a copy_from_user to a local stack array "essid", but both me and gcc have failed to find where the bounds for this copy are located in the code. This patch adds some basic sanity checks for the copy length to make sure that we don't overflow the stack buffer. Signed-off-by: Arjan van de Ven <arjan@linux.intel.com> Cc: linux-wireless@vger.kernel.org Signed-off-by: John W. Linville <linville@tuxdriver.com>