diff options
author | Pontus Fuchs <pontusf@broadcom.com> | 2015-03-06 16:18:41 +0100 |
---|---|---|
committer | Kalle Valo <kvalo@codeaurora.org> | 2015-03-07 10:52:30 +0200 |
commit | 3f1615340acea54e21f4b9d4d65921540dca84b2 (patch) | |
tree | 36dd5fa76bba565410b585c491719c8197fc18f9 /drivers/net/wireless/ath/ath9k | |
parent | eb9f75d88ebc0c17c1025972e5298ab965fee31b (diff) | |
download | op-kernel-dev-3f1615340acea54e21f4b9d4d65921540dca84b2.zip op-kernel-dev-3f1615340acea54e21f4b9d4d65921540dca84b2.tar.gz |
brcmfmac: Perform bound checking on vendor command buffer
A short or malformed vendor command buffer could cause reads outside
the command buffer.
Cc: stable@vger.kernel.org # v3.19
Signed-off-by: Pontus Fuchs <pontusf@broadcom.com>
[arend@broadcom.com: slightly modified debug trace output]
Signed-off-by: Arend van Spriel <arend@broadcom.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Diffstat (limited to 'drivers/net/wireless/ath/ath9k')
0 files changed, 0 insertions, 0 deletions