shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-06-10 12:57:06 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
v2.6.32.39
linux/drivers/staging/vt6655
History
Dan Carpenter e220aa2dd5 Staging: vt6655: fix buffer overflow 
commit dd173abfea upstream.

"param->u.wpa_associate.wpa_ie_len" comes from the user.  We should
check it so that the copy_from_user() doesn't overflow the buffer.

Also further down in the function, we assume that if
"param->u.wpa_associate.wpa_ie_len" is set then "abyWPAIE[0]" is
initialized.  To make that work, I changed the test here to say that if
"wpa_ie_len" is set then "wpa_ie" has to be a valid pointer or we return
-EINVAL.

Oddly, we only use the first element of the abyWPAIE[] array.  So I
suspect there may be some other issues in this function.

Signed-off-by: Dan Carpenter <error27@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
2010-09-26 17:21:24 -07:00
..
80211hdr.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
80211mgr.c
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
80211mgr.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
aes_ccmp.c
Staging: vt665x: Remove umem.h Part 1
2009-09-15 12:02:08 -07:00
aes_ccmp.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
baseband.c
Staging: vt665x: remove tbit.h part 2
2009-09-15 12:02:08 -07:00
baseband.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
bssdb.c
Staging: vt665x: remove tbit.h part 2
2009-09-15 12:02:08 -07:00
bssdb.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
card.c
Staging: vt665x: remove tbit.h part 2
2009-09-15 12:02:08 -07:00
card.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
country.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
datarate.c
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
datarate.h
Staging: Add pristine upstream vt6655 driver sources
2009-06-19 11:00:51 -07:00
desc.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
device_cfg.h
Staging: vt665x: Typedef and macro cleanup Part 2
2009-09-15 12:02:07 -07:00
device_main.c
staging: vt6655: Fix kernel BUG on driver wpa initialization
2010-07-05 11:10:29 -07:00
device.h
Staging: vt665x: fix built-in compiling
2009-09-15 12:02:34 -07:00
dpc.c
Staging: vt665x: remove tbit.h part 2
2009-09-15 12:02:08 -07:00
dpc.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
hostap.c
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
hostap.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
IEEE11h.c
Staging: vt665x: Remove umem.h Part 1
2009-09-15 12:02:08 -07:00
IEEE11h.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
iocmd.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
ioctl.c
Staging: vt665x: Remove umem.h Part 1
2009-09-15 12:02:08 -07:00
ioctl.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
iowpa.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
iwctl.c
Staging: vt665x: Remove umem.h Part 1
2009-09-15 12:02:08 -07:00
iwctl.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
kcompat.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
Kconfig
Staging: vt665x: depend on WIRELESS_EXT
2009-09-15 12:01:36 -07:00
key.c
Staging: vt665x: remove tbit.h part 2
2009-09-15 12:02:08 -07:00
key.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
mac.c
Staging: vt665x: remove tbit.h part 2
2009-09-15 12:02:08 -07:00
mac.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
Makefile
Staging: vt665x: fix built-in compiling
2009-09-15 12:02:34 -07:00
mib.c
Staging: vt665x: remove tbit.h part 2
2009-09-15 12:02:08 -07:00
mib.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
michael.c
Staging: vt665x: remove tbit.h part 2
2009-09-15 12:02:08 -07:00
michael.h
Staging: vt665x: Remove umem.h Part 1
2009-09-15 12:02:08 -07:00
power.c
Staging: vt665x: remove tbit.h part 2
2009-09-15 12:02:08 -07:00
power.h
Staging: vt665x: Text janitor in prep for driver merge, part 2
2009-09-15 12:02:07 -07:00
rc4.c
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
rc4.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
rf.c
Staging: vt665x: remove tbit.h part 2
2009-09-15 12:02:08 -07:00
rf.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
rxtx.c
Staging: vt665x: remove tbit.h part 2
2009-09-15 12:02:08 -07:00
rxtx.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
srom.c
Staging: vt665x: remove tbit.h part 2
2009-09-15 12:02:08 -07:00
srom.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
tcrc.c
Staging: vt665x: remove tbit.h part 2
2009-09-15 12:02:08 -07:00
tcrc.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
test
Staging: Add pristine upstream vt6655 driver sources
2009-06-19 11:00:51 -07:00
tether.c
Staging: vt665x: remove tbit.h part 2
2009-09-15 12:02:08 -07:00
tether.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
tkip.c
Staging: vt665x: remove tbit.h part 2
2009-09-15 12:02:08 -07:00
tkip.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
tmacro.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
TODO
Staging: update TODO files
2009-11-30 16:39:42 -08:00
ttype.h
Staging: vt665x: Typedef and macro cleanup Part 2
2009-09-15 12:02:07 -07:00
upc.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
vntconfiguration.dat
Staging: Add pristine upstream vt6655 driver sources
2009-06-19 11:00:51 -07:00
vntwifi.c
Staging: vt665x: remove tbit.h part 2
2009-09-15 12:02:08 -07:00
vntwifi.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
wcmd.c
Staging: vt665x: Remove umem.h Part 1
2009-09-15 12:02:08 -07:00
wcmd.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
wctl.c
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
wctl.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
wmgr.c
Staging: vt665x: remove tbit.h part 2
2009-09-15 12:02:08 -07:00
wmgr.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
wpa2.c
Staging: vt665x: Remove umem.h Part 1
2009-09-15 12:02:08 -07:00
wpa2.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
wpa.c
Staging: vt665x: Remove umem.h Part 1
2009-09-15 12:02:08 -07:00
wpa.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
wpactl.c
Staging: vt6655: fix buffer overflow
2010-09-26 17:21:24 -07:00
wpactl.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
wroute.c
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00
wroute.h
Staging: vt665x: Clean up include files, Part 2
2009-09-15 12:02:08 -07:00