| commit | d1f0f3118e55ad80136d19dd4afdb32ccba26a42 | [log] [tgz] |
|---|---|---|
| author | Dan Carpenter <dan.carpenter@oracle.com> | Tue Jul 28 18:48:21 2015 +0300 |
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | Fri Jul 31 16:18:43 2015 -0700 |
| tree | e21e52d502771ca807e5a4e1e5deed271e14b3ee | |
| parent | 881bf281237c3eaf7759040653e779c6cc6c2e00 [diff] |
Staging: rtl8192e: array overflow in rtl92e_set_swcam() "EntryNo" is comes from the user in the ioctl and it's a number between 0-255. The ieee->swcamtable[] array only has 32 elements so it can result in memory corruption. Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>