]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
staging: rtl8712: Fix possible buffer overflow in r8712_sitesurvey_cmd
authorLee Gibson <leegib@gmail.com>
Mon, 1 Mar 2021 13:26:48 +0000 (13:26 +0000)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 17 Mar 2021 15:34:33 +0000 (16:34 +0100)
commit8fccad1a2f5efe1f2b0874ceb9fb81aca2732655
tree065a94eabed9d9ffb89e374cb02c692a50f7eb55
parent9085704d042d18ac2e84685e92547c1a9cbe02b3
staging: rtl8712: Fix possible buffer overflow in r8712_sitesurvey_cmd

commit b93c1e3981af19527beee1c10a2bef67a228c48c upstream.

Function r8712_sitesurvey_cmd calls memcpy without checking the length.
A user could control that length and trigger a buffer overflow.
Fix by checking the length is within the maximum allowed size.

Signed-off-by: Lee Gibson <leegib@gmail.com>
Link: https://lore.kernel.org/r/20210301132648.420296-1-leegib@gmail.com
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/staging/rtl8712/rtl871x_cmd.c