[0/2] Buffer overflow / read checks in mwifiex
mbox series

Message ID 20190529125220.17066-1-tiwai@suse.de
Headers show
Series
  • Buffer overflow / read checks in mwifiex
Related show

Message

Takashi Iwai May 29, 2019, 12:52 p.m. UTC
Hi,

this is fixes for a few spots that perform memcpy() without checking
the source and the destination size in mwifiex driver, which may lead
to buffer overflows or read over boundary.


Takashi

===

Takashi Iwai (2):
  mwifiex: Fix possible buffer overflows at parsing bss descriptor
  mwifiex: Abort at too short BSS descriptor element

 drivers/net/wireless/marvell/mwifiex/scan.c | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)