Dan Carpenter 13d434fed1 wireless: airo: potential buffer overflow in sprintf() ...

[ Upstream commit 3d39e1bb1c ]

It looks like we wanted to print a maximum of BSSList_rid.ssidLen bytes
of the ssid, but we accidentally use "%*s" (width) instead of "%.*s"
(precision) so if the ssid doesn't have a NUL terminator this could lead
to an overflow.

Static analysis.  Not tested.

Fixes: e174961ca1 ("net: convert print_mac to %pM")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2019-12-01 09:17:23 +01:00

..

airo_cs.c

airo: remove unused variables len and dev and clean up formatting

2018-07-31 10:17:19 +03:00

airo.c

wireless: airo: potential buffer overflow in sprintf()

2019-12-01 09:17:23 +01:00

airo.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

Kconfig

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next

2018-04-03 14:04:18 -07:00

Makefile

airo: move under cisco vendor directory

2015-11-18 11:18:34 +02:00