1
0
Fork 0
mirror of synced 2025-03-06 20:59:54 +01:00
linux/drivers/net/wireless/quantenna/qtnfmac
Lee Gibson 130f634da1 qtnfmac: Fix possible buffer overflow in qtnf_event_handle_external_auth
Function qtnf_event_handle_external_auth calls memcpy without
checking the length.
A user could control that length and trigger a buffer overflow.
Fix by checking the length is within the maximum allowed size.

Signed-off-by: Lee Gibson <leegib@gmail.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Link: https://lore.kernel.org/r/20210419145842.345787-1-leegib@gmail.com
2021-04-22 17:40:12 +03:00
..
pcie qtnfmac_pcie: Use module_pci_driver 2021-01-14 19:31:10 +02:00
bus.h qtnfmac: Replace zero-length array with flexible-array 2020-05-12 11:56:28 +03:00
cfg80211.c qtnfmac: remove meaningless labels 2021-04-17 20:27:22 +03:00
cfg80211.h qtnfmac: convert to SPDX license identifiers 2019-02-01 14:12:02 +02:00
commands.c qtnfmac: remove meaningless goto statement and labels 2021-04-17 20:33:27 +03:00
commands.h qtnfmac: support WPA3 OWE in AP mode 2020-03-12 15:38:56 +02:00
core.c cfg80211: avoid holding the RTNL when calling the driver 2021-01-26 11:55:50 +01:00
core.h qtnfmac: switch to core handling of rx/tx byte/packet counters 2020-11-12 14:58:27 -08:00
debug.c qtnfmac: modify debugfs to support multiple cards 2019-04-26 14:53:13 +03:00
debug.h qtnfmac: convert to SPDX license identifiers 2019-02-01 14:12:02 +02:00
event.c qtnfmac: Fix possible buffer overflow in qtnf_event_handle_external_auth 2021-04-22 17:40:12 +03:00
event.h qtnfmac: convert to SPDX license identifiers 2019-02-01 14:12:02 +02:00
Kconfig treewide: Add SPDX license identifier - Makefile/Kconfig 2019-05-21 10:50:46 +02:00
Makefile qtnfmac: add support for Topaz chipsets 2018-11-06 18:53:50 +02:00
qlink.h qtnfmac: Replace zero-length array with flexible-array 2020-05-12 11:56:28 +03:00
qlink_util.c qtnfmac: set valid edmg in cfg80211_chan_def 2020-03-12 15:38:57 +02:00
qlink_util.h qtnfmac: drop unnecessary TLVs from scan command 2020-02-12 18:16:48 +02:00
qtn_hw_ids.h qtnfmac: convert to SPDX license identifiers 2019-02-01 14:12:02 +02:00
shm_ipc.c qtnfmac: convert to SPDX license identifiers 2019-02-01 14:12:02 +02:00
shm_ipc.h qtnfmac: convert to SPDX license identifiers 2019-02-01 14:12:02 +02:00
shm_ipc_defs.h qtnfmac: convert to SPDX license identifiers 2019-02-01 14:12:02 +02:00
switchdev.h qtnfmac: signal that all packets coming from device are already flooded 2019-11-20 09:42:59 +02:00
trans.c qtnfmac: convert to SPDX license identifiers 2019-02-01 14:12:02 +02:00
trans.h qtnfmac: convert to SPDX license identifiers 2019-02-01 14:12:02 +02:00
util.c qtnfmac: convert to SPDX license identifiers 2019-02-01 14:12:02 +02:00
util.h qtnfmac: convert to SPDX license identifiers 2019-02-01 14:12:02 +02:00