linux/drivers/staging/ks7010
Dan Carpenter 9fe42273b2 staging: ks7010: prevent buffer overflow in ks_wlan_set_scan()
commit e163b9823a0b08c3bb8dc4f5b4b5c221c24ec3e5 upstream.

The user can specify a "req->essid_len" of up to 255 but if it's
over IW_ESSID_MAX_SIZE (32) that can lead to memory corruption.

Fixes: 13a9930d15 ("staging: ks7010: add driver from Nanonote extra-repository")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Cc: stable <stable@vger.kernel.org>
Link: https://lore.kernel.org/r/YD4fS8+HmM/Qmrw6@mwanda
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-03-17 17:03:53 +01:00
..
Kconfig Revert "staging: ks7010: Fix build error" 2019-06-24 16:45:34 +08:00
Makefile
TODO
eap_packet.h
ks7010_sdio.c staging: ks7010: Remove initialisation in ks7010_sdio.c 2019-05-30 14:09:46 -07:00
ks_hostif.c staging: ks7010: Merge multiple return variables in ks_hostif.c 2019-05-30 14:09:46 -07:00
ks_hostif.h
ks_wlan.h
ks_wlan_ioctl.h
ks_wlan_net.c staging: ks7010: prevent buffer overflow in ks_wlan_set_scan() 2021-03-17 17:03:53 +01:00