]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
staging: rtl8192e: Fix possible buffer overflow in _rtl92e_wx_set_scan
authorLee Gibson <leegib@gmail.com>
Fri, 26 Feb 2021 14:51:57 +0000 (14:51 +0000)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 17 Mar 2021 15:07:22 +0000 (16:07 +0100)
commitb5247b6661a55fb3de9c73a7227e630b218b35b5
tree0baade6b345d9cb314ccd28203b8d5eebe040e8a
parente6cd3f4569d47af6a80b7a1b4ce96128362efcd3
staging: rtl8192e: Fix possible buffer overflow in _rtl92e_wx_set_scan

commit 8687bf9ef9551bcf93897e33364d121667b1aadf upstream.

Function _rtl92e_wx_set_scan calls memcpy without checking the length.
A user could control that length and trigger a buffer overflow.
Fix by checking the length is within the maximum allowed size.

Reviewed-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Lee Gibson <leegib@gmail.com>
Cc: stable <stable@vger.kernel.org>
Link: https://lore.kernel.org/r/20210226145157.424065-1-leegib@gmail.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/staging/rtl8192e/rtl8192e/rtl_wx.c