tree e21e52d502771ca807e5a4e1e5deed271e14b3ee
parent 881bf281237c3eaf7759040653e779c6cc6c2e00
author Dan Carpenter <dan.carpenter@oracle.com> 1438098501 +0300
committer Greg Kroah-Hartman <gregkh@linuxfoundation.org> 1438384723 -0700

Staging: rtl8192e: array overflow in rtl92e_set_swcam()

"EntryNo" is comes from the user in the ioctl and it's a number between
0-255.  The ieee->swcamtable[] array only has 32 elements so it can
result in memory corruption.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>