Dan Carpenter 60bdb51d44 Staging: rtl8723bs: prevent buffer overflow in update_sta_support_rate() ... commit b65a2d8c86 upstream. The "ie_len" variable is in the 0-255 range and it comes from the network. If it's over NDIS_802_11_LENGTH_RATES_EX (16) then that will lead to memory corruption. Fixes: 554c0a3abf ("staging: Add rtl8723bs sdio wifi driver") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Cc: stable <stable@vger.kernel.org> Link: https://lore.kernel.org/r/20200603101958.GA1845750@mwanda Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2020-06-30 15:37:11 -04:00
..
core	Staging: rtl8723bs: prevent buffer overflow in update_sta_support_rate()	2020-06-30 15:37:11 -04:00
hal	staging: rtl8723bs: fix copy of overlapping memory	2020-02-28 17:22:26 +01:00
include	…
os_dep	…
Kconfig	…
Makefile	…
TODO	…