| commit | 3348ef6a6a126706d6a73ed40c18d8033df72783 | [log] [tgz] |
|---|---|---|
| author | Dan Carpenter <dan.carpenter@oracle.com> | Tue Aug 14 12:07:48 2018 +0300 |
| committer | Kalle Valo <kvalo@codeaurora.org> | Fri Aug 31 18:43:36 2018 +0300 |
| tree | a23bddefdb4f2287260537d21bc3c110cc45ceee | |
| parent | 62a25dc56990a382afeb40891eead0dbf8b598b4 [diff] |
libertas_tf: prevent underflow in process_cmdrequest()
If recvlength is less than MESSAGE_HEADER_LEN (4) we would end up
corrupting memory.
Fixes: c305a19a0d0a ("libertas_tf: usb specific functions")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>