| commit | 5b6567ee84d6e8f7015eaa7d7c4926b4fd81746e | [log] [tgz] |
|---|---|---|
| author | Dan Carpenter <error27@gmail.com> | Sun Feb 20 15:49:53 2011 +0300 |
| committer | Greg Kroah-Hartman <gregkh@suse.de> | Wed Feb 23 14:00:13 2011 -0800 |
| tree | 92c7ee327f13151e4534e7a68aba02be59ed2612 | |
| parent | 253804a25b45aad7bf4f63483f7c7b1d14ab49e2 [diff] |
staging: ath6kl: buffer overflow in SEND_FRAME ioctl We should check that optTxFrmCmd.optIEDataLen isn't too large before we copy it into the data buffer. Signed-off-by: Dan Carpenter <error27@gmail.com> Acked-by: Vipin Mehta <vipin.mehta@atheros.com> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>