Haggai Eran 38559326b1 staging: rtl8712: prevent buffer overrun in recvbuf2recvframe ...

commit cab462140f upstream.

With an RTL8191SU USB adaptor, sometimes the hints for a fragmented
packet are set, but the packet length is too large. Allocate enough
space to prevent memory corruption and a resulting kernel panic [1].

[1] http://www.spinics.net/lists/linux-wireless/msg136546.html

Signed-off-by: Haggai Eran <haggai.eran@gmail.com>
ACKed-by: Larry Finger <Larry.Finger@lwfinger.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2015-08-03 09:29:42 -07:00

..

android

staging: binder: Fix death notifications

2014-03-06 21:30:11 -08:00

asus_oled

staging: Remove unnecessary OOM messages

2013-02-11 10:10:33 -08:00

bcm

Staging: bcm: info leak in ioctl

2013-11-13 12:05:33 +09:00

ced1401

staging: Remove unnecessary OOM messages

2013-02-11 10:10:33 -08:00

comedi

staging: comedi: cb_pcidas64: fix incorrect AI range code handling

2015-03-18 13:22:34 +01:00

cptm1217

staging: cptm1217: Use dev_pm_ops

2013-04-08 10:20:16 -07:00

crystalhd

staging: crystalhd: remove use of __devexit

2012-11-21 15:05:12 -08:00

csr

staging: single_open() leaks

2013-05-05 00:15:43 -04:00

cxt1e1

staging: single_open() leaks

2013-05-05 00:15:43 -04:00

dgrp

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2013-05-01 17:51:54 -07:00

dwc2

staging: dwc2: fix value of dma_mask

2013-05-30 21:14:30 +09:00

echo

staging: echo.c: fix memory leakage

2013-01-07 14:03:32 -08:00

et131x

staging: et131x: cancel_work when module gets unloaded

2013-04-11 13:07:05 -07:00

frontier

staging: Remove unnecessary OOM messages

2013-02-11 10:10:33 -08:00

ft1000

staging: single_open() leaks

2013-05-05 00:15:43 -04:00

fwserial

Merge tag 'tty-3.10-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty

2013-04-29 12:16:17 -07:00

gdm72xx

USB: remove remaining instances of USB_SUSPEND

2013-05-15 13:44:44 -04:00

goldfish

staging/goldfish: Add MTD dependency to KCONFIG

2013-02-07 17:16:07 -08:00

iio

staging:iio:ade7758: Remove "raw" from channel name

2014-11-14 08:47:58 -08:00

imx-drm

imx-drm: imx-drm-core: Export imx_drm_encoder_get_mux_id

2013-09-07 22:10:00 -07:00

keucr

keucr: switch to ->show_info()

2013-04-09 14:13:20 -04:00

line6

staging: line6: Fix unlocked snd_pcm_stop() call

2013-07-25 14:07:42 -07:00

media

media: lirc_zilog: Don't use dynamic static allocation

2013-12-04 10:57:32 -08:00

netlogic

Staging: netlogic: remove unused variable in xlr_net_start_xmit()

2013-03-14 15:03:56 -07:00

nvec

Merge tag 'staging-3.10-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging

2013-05-23 09:27:49 -07:00

octeon

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial

2013-02-21 17:40:58 -08:00

olpc_dcon

staging: olpc_dcon: return NOTIFY_DONE instead of the 0.

2013-03-25 11:02:55 -07:00

ozwpan

ozwpan: unchecked signed subtraction leads to DoS

2015-06-22 16:55:54 -07:00

panel

staging: panel: fix lcd type

2015-05-13 05:15:42 -07:00

phison

staging/phison: use module_pci_driver macro

2012-07-11 17:26:02 -07:00

quickstart

ACPI: Remove useless type argument of driver .remove() operation

2013-01-26 00:37:24 +01:00

rtl8187se

staging: rtl8712, rtl8712: avoid lots of build warnings

2015-06-05 23:19:53 -07:00

rtl8192e

staging, rtl8192e, LLVMLinux: Remove unused inline prototype

2015-06-05 23:19:53 -07:00

rtl8192u

staging: rtl8712, rtl8712: avoid lots of build warnings

2015-06-05 23:19:53 -07:00

rtl8712

staging: rtl8712: prevent buffer overrun in recvbuf2recvframe

2015-08-03 09:29:42 -07:00

rts5139

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2013-05-01 17:51:54 -07:00

sb105x

Staging: sb105x: info leak in mp_get_count()

2013-11-13 12:05:33 +09:00

sbe-2t3e3

staging: Remove unnecessary OOM messages

2013-02-11 10:10:33 -08:00

sep

staging: sep: fix driver build and kconfig

2013-05-16 15:37:49 -07:00

serqt_usb2

staging:serqt_usb2: Fix sparse warning restricted __le16 degrades to integer

2014-05-06 07:55:28 -07:00

silicom

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2013-05-01 17:51:54 -07:00

slicoss

staging: slicoss: information leak in ETHTOOL_GSET

2013-04-05 14:17:00 -07:00

sm7xxfb

staging/sm7xxfb: Convert to SIMPLE_DEV_PM_OPS

2013-03-11 09:23:43 -07:00

speakup

Staging: speakup: Update __speakup_paste_selection() tty (ab)usage to match vt

2014-09-05 16:28:36 -07:00

ste_rmi4

staging: ste_rmi4: Suppress 'ignoring return value of ‘regulator_enable()' warning

2013-05-16 15:37:49 -07:00

ti-soc-thermal

staging: ti-soc-thermal: fix device removal

2013-04-08 10:35:09 -07:00

tidspbridge

staging: tidspbridge: check for CONFIG_SND_OMAP_SOC_MCBSP

2014-06-30 20:09:41 -07:00

usbip

staging: usbip: userspace: show product name in `list -l' command

2013-04-05 14:22:52 -07:00

vme

staging: vme: fix for a potential NULL pointer dereference

2013-03-25 11:17:33 -07:00

vt6655

vt6655: RFbSetPower fix missing rate RATE_12M

2015-04-13 14:02:12 +02:00

vt6656

staging: vt6656: CARDqGetNextTBTT correct uLowNextTBTT

2014-02-06 11:08:14 -08:00

winbond

staging: Add angle bracket before and after the URL

2013-01-07 14:56:04 -08:00

wlags49_h2

staging: wlags49_h2: fix extern inline functions

2015-06-05 23:19:53 -07:00

wlags49_h25

staging: "wlags49_h25" Fix typos.

2012-09-17 14:50:33 -07:00

wlan-ng

staging: wlan-ng: prism2usb.c: fix printk(KERN_ERR... to dev_err(dev, ...

2013-03-26 16:13:20 -07:00

xgifb

staging: xgifb: rename SR15/SR13 arrays to SR18

2013-03-28 16:10:16 -07:00

zcache

staging: zcache: fix "zcache=" kernel parameter

2013-08-14 22:59:06 -07:00

zram

zram: allow request end to coincide with disksize

2013-08-14 22:59:09 -07:00

zsmalloc

staging: zsmalloc: Ensure handle is never 0 on success

2013-12-04 10:55:47 -08:00

Kconfig

staging: Swap zram and zsmalloc in Kconfig

2013-05-16 15:38:58 -07:00

Makefile

staging: net: remove pc300 driver

2013-04-19 11:15:20 -07:00

staging.c

…