linux/drivers/net/wireless
Zhang Xiaohui b35029a1f2 mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start
[ Upstream commit 5c455c5ab3 ]

mwifiex_cmd_802_11_ad_hoc_start() calls memcpy() without checking
the destination size may trigger a buffer overflower,
which a local user could use to cause denial of service
or the execution of arbitrary code.
Fix it by putting the length check before calling memcpy().

Signed-off-by: Zhang Xiaohui <ruc_zhangxiaohui@163.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Link: https://lore.kernel.org/r/20201206084801.26479-1-ruc_zhangxiaohui@163.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
2021-01-09 13:43:48 +01:00
..
admtek
ath ath10k: Release some resources in an error handling path 2020-12-30 11:25:59 +01:00
atmel at76c50x-usb: Don't register led_trigger if usb_register_driver failed 2019-05-31 06:46:05 -07:00
broadcom brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach 2020-10-30 10:38:31 +01:00
cisco airo: Fix read overflows sending packets 2020-06-07 13:17:54 +02:00
intel iwlwifi: mvm: fix kernel panic in case of assert during CSA 2020-12-30 11:25:38 +01:00
intersil orinoco: Move context allocation after processing the skb 2020-12-30 11:25:56 +01:00
marvell mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start 2021-01-09 13:43:48 +01:00
mediatek mt76: clear skb pointers from rx aggregation reorder buffer during cleanup 2020-10-01 13:14:33 +02:00
quantenna qtnfmac: fix resource leaks on unsupported iftype error return path 2020-10-29 09:55:12 +01:00
ralink rt2x00: do not increment sequence number while re-transmitting 2019-04-27 09:36:38 +02:00
realtek rtl8xxxu: prevent potential memory leak 2020-10-30 10:38:31 +01:00
rsi rsi: fix use-after-free on failed probe and unbind 2020-02-05 14:43:33 +00:00
st cw1200: fix missing destroy_workqueue() on error in cw1200_init_common 2020-12-30 11:25:56 +01:00
ti wlcore: fix runtime pm imbalance in wlcore_regdomain_config 2020-10-01 13:14:47 +02:00
zydas zd1211rw: fix storage endpoint lookup 2020-02-01 09:37:05 +00:00
Kconfig
mac80211_hwsim.c mac80211_hwsim: Use kstrndup() in place of kasprintf() 2020-04-21 09:03:09 +02:00
mac80211_hwsim.h
Makefile
ray_cs.c
ray_cs.h
rayctl.h
rndis_wlan.c
wl3501_cs.c
wl3501.h