91fca6da38
(adapted from the rtl8187se patch)
ieee80211_wx_get_name() ignores sizeof(wrqu->name) which is IFNAMSIZ (16), and
on certain conditions, the concatenated string will be larger than IFNAMSIZ
including the terminating zero.
length ("802.11" ++ "b" ++ "/g" ++ " linked" ++ "\x00") == 17
This fix uses strl{cpy,cat} in addition to the reduction of the total
possible length of the output string by a char.
It can be applied to 2.6.30-stable as well.
Signed-off-by: Dan Aloni <dan@aloni.org>
Cc: Bartlomiej Zolnierkiewicz <bzolnier@gmail.com>
Cc: stable <stable@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
|
||
|---|---|---|
| .. | ||
| ieee80211 | ||
| authors | ||
| dot11d.h | ||
| ieee80211_crypt.h | ||
| ieee80211.h | ||
| Kconfig | ||
| Makefile | ||
| r819xU_cmdpkt.c | ||
| r819xU_cmdpkt.h | ||
| r819xU_firmware_img.c | ||
| r819xU_firmware_img.h | ||
| r819xU_firmware.c | ||
| r819xU_firmware.h | ||
| r819xU_HTGen.h | ||
| r819xU_HTType.h | ||
| r819xU_phy.c | ||
| r819xU_phy.h | ||
| r819xU_phyreg.h | ||
| r8180_93cx6.c | ||
| r8180_93cx6.h | ||
| r8190_rtl8256.c | ||
| r8190_rtl8256.h | ||
| r8192S_Efuse.c | ||
| r8192S_Efuse.h | ||
| r8192S_firmware.c | ||
| r8192S_firmware.h | ||
| r8192S_FwImgDTM.h | ||
| r8192S_hw.h | ||
| r8192S_phy.c | ||
| r8192S_phy.h | ||
| r8192S_phyreg.h | ||
| r8192S_rtl6052.c | ||
| r8192S_rtl6052.h | ||
| r8192S_rtl8225.c | ||
| r8192S_rtl8225.h | ||
| r8192SU_HWImg.c | ||
| r8192SU_HWImg.h | ||
| r8192U_core.c | ||
| r8192U_dm.c | ||
| r8192U_dm.h | ||
| r8192U_hw.h | ||
| r8192U_pm.c | ||
| r8192U_pm.h | ||
| r8192U_wx.c | ||
| r8192U_wx.h | ||
| r8192U.h | ||