projects
/
linux-drm-fsl-dcu.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
| inline |
side by side
staging: vt6655: buffer overflow in ioctl
[linux-drm-fsl-dcu.git]
/
drivers
/
staging
/
vt6655
/
hostap.c
diff --git
a/drivers/staging/vt6655/hostap.c
b/drivers/staging/vt6655/hostap.c
index f105c2ac091b7eaf80a99fa75cf26fee0c5543f3..164136b07a68c8243066e280dbb1293d0e1c819d 100644
(file)
--- a/
drivers/staging/vt6655/hostap.c
+++ b/
drivers/staging/vt6655/hostap.c
@@
-350,6
+350,9
@@
static int hostap_set_generic_element(PSDevice pDevice,
{
PSMgmtObject pMgmt = pDevice->pMgmt;
+ if (param->u.generic_elem.len > sizeof(pMgmt->abyWPAIE))
+ return -EINVAL;
+
memcpy(pMgmt->abyWPAIE,
param->u.generic_elem.data,
param->u.generic_elem.len