| commit | 4ccb726c728cb414d9abc65a11a6453e75204503 | [log] [tgz] |
|---|---|---|
| author | Tillmann Heidsieck <theidsieck@leenox.de> | Wed Sep 23 22:07:53 2015 +0200 |
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | Tue Sep 29 04:19:26 2015 +0200 |
| tree | 5b10e6733279602ccfa3e6c1d8a9a670b700f26f | |
| parent | 174f2642349da542eb27c011e67a147773d8721f [diff] |
staging: wlan-ng fix buffer overflow in firmware handling We test for an END marker in the element beyond the current one, this effectively limits the size of the array to be HFA384x_PDA_LEN_MAX/2 - 1 not HFA384x_PDR_END_OF_PDA/2. This patch fixes a possible buffer overflow in case there was no END marker. Signed-off-by: Tillmann Heidsieck <theidsieck@leenox.de> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>