mirror-linux/drivers/staging
Zhang Shurong 7ae9f55a49 staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()
commit 5f1c7031e0 upstream.

The "exc->key_len" is a u16 that comes from the user.  If it's over
IW_ENCODING_TOKEN_MAX (64) that could lead to memory corruption.

Fixes: b121d84882 ("staging: ks7010: simplify calls to memcpy()")
Cc: stable <stable@kernel.org>
Signed-off-by: Zhang Shurong <zhang_shurong@foxmail.com>
Reviewed-by: Dan Carpenter <dan.carpenter@linaro.org>
Link: https://lore.kernel.org/r/tencent_5153B668C0283CAA15AA518325346E026A09@qq.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2023-08-03 10:24:12 +02:00
..
axis-fifo staging: axis-fifo: initialize timeouts in init only 2023-05-24 17:32:40 +01:00
board
emxx_udc
fbtft
fieldbus
gdm724x
greybus
iio
ks7010 staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() 2023-08-03 10:24:12 +02:00
media media: staging: atomisp: select V4L2_FWNODE 2023-08-03 10:23:57 +02:00
most
nvec
octeon
olpc_dcon
pi433
qlge
r8188eu
rtl8192e Revert "staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE" 2023-06-14 11:15:34 +02:00
rtl8192u
rtl8712 staging: r8712: Fix memory leak in _r8712_init_xmit_priv() 2023-08-03 10:24:11 +02:00
rtl8723bs drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() 2023-05-11 23:03:27 +09:00
rts5208
sm750fb
vc04_services staging: vchiq_arm: mark vchiq_platform_init() static 2023-07-19 16:21:52 +02:00
vme_user
vt6655
vt6656
wlan-ng
Kconfig
Makefile