mirror-linux/drivers/net
Dan Carpenter 95edbc30db mwifiex: potential integer underflow in mwifiex_ret_wmm_get_status()
Before we loop for next iteration we adjust the buffer pointer and
"resp_len":

		curr += (tlv_len + sizeof(tlv_hdr->header));
		resp_len -= (tlv_len + sizeof(tlv_hdr->header));

If "resp_len" gets set to negative then it counts as a high positive
value.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Amitkumar Karwar <akarwar@marvell.com>
Signed-off-by: Bing Zhao <bzhao@marvell.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
2013-11-11 14:38:56 -05:00
..
appletalk
arcnet
bonding bonding: extend round-robin mode with packets_per_slave 2013-11-07 15:10:21 -05:00
caif
can Merge branch 'for-davem' of git://gitorious.org/linux-can/linux-can-next 2013-11-04 19:59:44 -05:00
cris
dsa
ethernet ixgbe: add warning when max_vfs is out of range. 2013-11-11 00:19:36 -05:00
fddi
hamradio Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net 2013-10-23 16:49:34 -04:00
hippi
hyperv
ieee802154
irda
phy phy: Add MOXA MDIO driver 2013-11-07 15:37:09 -05:00
plip
ppp
slip
team
usb net: cdc_ncm: remove non-standard NCM device IDs 2013-11-05 15:21:26 -05:00
vmxnet3
wan Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net 2013-11-04 13:48:30 -05:00
wimax
wireless mwifiex: potential integer underflow in mwifiex_ret_wmm_get_status() 2013-11-11 14:38:56 -05:00
xen-netback Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net 2013-11-04 13:48:30 -05:00
Kconfig
LICENSE.SRC
Makefile
Space.c
dummy.c
eql.c
ifb.c
loopback.c
macvlan.c net: Add layer 2 hardware acceleration operations for macvlan devices 2013-11-07 19:11:41 -05:00
macvtap.c
mdio.c
mii.c
netconsole.c Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net 2013-11-04 13:48:30 -05:00
nlmon.c
ntb_netdev.c
rionet.c
sb1000.c
sungem_phy.c
tun.c
veth.c veth: extend features to support tunneling 2013-10-28 00:57:29 -04:00
virtio_net.c virtio-net: switch to use XPS to choose txq 2013-11-05 22:20:29 -05:00
vxlan.c vxlan: Use ERR_CAST inlined function instead of ERR_PTR(PTR_ERR(...)) 2013-11-04 20:02:33 -05:00
xen-netfront.c