| commit | 685c9b7750bfacd6fc1db50d86579980593b7869 | [log] [tgz] |
|---|---|---|
| author | Takashi Iwai <tiwai@suse.de> | Wed May 29 14:52:20 2019 +0200 |
| committer | Kalle Valo <kvalo@codeaurora.org> | Thu May 30 14:22:12 2019 +0300 |
| tree | b662ff8b773c688458ac810d1ee67b7e0fcaf829 | |
| parent | 13ec7f10b87f5fc04c4ccbd491c94c7980236a74 [diff] |
mwifiex: Abort at too short BSS descriptor element Currently mwifiex_update_bss_desc_with_ie() implicitly assumes that the source descriptor entries contain the enough size for each type and performs copying without checking the source size. This may lead to read over boundary. Fix this by putting the source size check in appropriate places. Signed-off-by: Takashi Iwai <tiwai@suse.de> Signed-off-by: Kalle Valo <kvalo@codeaurora.org>