Dan Carpenter be9745304e staging: rtl8188eu: fix potential memory corruption in rtw_check_beacon_data() ...

commit d4ac640322 upstream.

The "ie_len" is a value in the 1-255 range that comes from the user.  We
have to cap it to ensure that it's not too large or it could lead to
memory corruption.

Fixes: 9a7fe54ddc ("staging: r8188eu: Add source files for new driver - part 1")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Cc: stable <stable@vger.kernel.org>
Link: https://lore.kernel.org/r/YEHyQCrFZKTXyT7J@mwanda
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2021-03-17 17:06:31 +01:00

..

core

staging: rtl8188eu: fix potential memory corruption in rtw_check_beacon_data()

2021-03-17 17:06:31 +01:00

hal

staging: rtl8188eu: remove unused variable ratelen

2020-10-01 10:57:07 +02:00

include

staging: rtl8188eu: remove unused variable ratelen

2020-10-01 10:57:07 +02:00

os_dep

staging: rtl8188eu: prevent ->ssid overflow in rtw_wx_set_scan()

2021-03-17 17:06:31 +01:00

Kconfig

staging: rtl8188eu: use help instead of ---help--- in Kconfig

2019-05-20 10:49:07 +02:00

Makefile

staging: rtl8188eu: rename odm_HWConfig

2018-10-02 15:20:40 -07:00

TODO

staging: rtl8188eu: Fix spelling mistake

2018-08-27 19:29:39 +02:00