linux/drivers/staging
Dan Carpenter dd173abfea Staging: vt6655: fix buffer overflow
"param->u.wpa_associate.wpa_ie_len" comes from the user.  We should
check it so that the copy_from_user() doesn't overflow the buffer.

Also further down in the function, we assume that if
"param->u.wpa_associate.wpa_ie_len" is set then "abyWPAIE[0]" is
initialized.  To make that work, I changed the test here to say that if
"wpa_ie_len" is set then "wpa_ie" has to be a valid pointer or we return
-EINVAL.

Oddly, we only use the first element of the abyWPAIE[] array.  So I
suspect there may be some other issues in this function.

Signed-off-by: Dan Carpenter <error27@gmail.com>
Cc: stable <stable@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
2010-09-20 16:31:54 -07:00
..
adis16255
asus_oled
batman-adv Revert: "Staging: batman-adv: Adding netfilter-bridge hooks" 2010-09-20 16:31:54 -07:00
comedi staging: comedi das08_cs.c: Fix io_req_t conversion 2010-09-03 17:37:15 -07:00
crystalhd
cx25821 Staging: Merge staging-next into Linus's tree 2010-08-05 14:18:03 -07:00
cxt1e1
dream
dt3155v4l
easycap staging: Pushdown bkl to easycap ioctl handlers 2010-08-09 03:28:40 +02:00
echo
et131x
frontier
go7007
hv staging: hv: Fixed lockup problem with bounce_buffer scatter list 2010-09-03 17:37:15 -07:00
iio
line6
lirc V4L/DVB: STAGING: remove lirc_ene0100 driver 2010-08-08 23:43:00 -03:00
memrar Staging: Merge staging-next into Linus's tree 2010-08-05 14:18:03 -07:00
mrst-touchscreen
msm
octeon Staging: octeon: depends on NETDEVICES 2010-09-03 17:37:16 -07:00
otus
panel
phison
pohmelfs fs: fs_struct rwlock to spinlock 2010-08-18 08:35:46 -04:00
quatech_usb2
quickstart
rt2860 Staging: rt2870sta: Add more device IDs from vendor drivers 2010-09-03 17:37:15 -07:00
rt2870
rtl8187se param: remove unnecessary writable charp 2010-08-11 23:04:27 +09:30
rtl8192e param: remove unnecessary writable charp 2010-08-11 23:04:27 +09:30
rtl8192su param: remove unnecessary writable charp 2010-08-11 23:04:27 +09:30
rtl8192u Staging: Merge staging-next into Linus's tree 2010-08-05 14:18:03 -07:00
samsung-laptop
serqt_usb2
slicoss
sm7xx
solo6x10
spectra Staging: spectra: depend on X86_MRST 2010-09-03 17:37:16 -07:00
ti-st
tidspbridge
tm6000
udlfb
usbip USB: convert usb_hcd bitfields into atomic flags 2010-08-10 14:35:37 -07:00
vme
vt6655 Staging: vt6655: fix buffer overflow 2010-09-20 16:31:54 -07:00
vt6656
winbond Staging: Merge staging-next into Linus's tree 2010-08-05 14:18:03 -07:00
wlags49_h2 Merge git://git.kernel.org/pub/scm/linux/kernel/git/brodo/pcmcia-2.6 2010-08-06 12:25:06 -07:00
wlags49_h25
wlan-ng Staging: wlan-ng: Explicitly set some fields in cfg80211 interface 2010-09-03 17:37:16 -07:00
xgifb
zram Staging: zram: free device memory when init fails 2010-09-03 17:37:15 -07:00
Kconfig Staging: sep: remove driver 2010-08-23 18:15:38 -07:00
Makefile Staging: sep: remove driver 2010-08-23 18:15:38 -07:00
staging.c