mbox series

[0/2] libertas: fix rates overflow code path in lbs_ibss_join_existing()

Message ID 20200114103903.2336-1-nstange@suse.de (mailing list archive)
Headers show
Series libertas: fix rates overflow code path in lbs_ibss_join_existing() | expand

Message

Nicolai Stange Jan. 14, 2020, 10:39 a.m. UTC 
Hi,

these two patches here attempt to cleanup two related issues ([1])
introduced with commit e5e884b42639 ("libertas: Fix two buffer overflows
at parsing bss descriptor"), currently queued at the  wireless-drivers
tree.

Feel free to squash this into one commit.

I don't own the hardware and did some compile-testing on x86_64 only.

Thanks,

Nicolai

[1] https://lkml.kernel.org/r/87woa04t2v.fsf@suse.de


Nicolai Stange (2):
  libertas: don't exit from lbs_ibss_join_existing() with RCU read lock
    held
  libertas: make lbs_ibss_join_existing() return error code on rates
    overflow

 drivers/net/wireless/marvell/libertas/cfg.c | 2 ++
 1 file changed, 2 insertions(+)