mwifiex: fix invalid memory access in mwifiex_update_autoindex_ies()

Browse source

While parsing TLVs, return failure if number of remaining bytes
are less than current tlv length. This avoids invalid memory
access.

Signed-off-by: Amitkumar Karwar <akarwar@marvell.com>
Signed-off-by: Bing Zhao <bzhao@marvell.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>

...

This commit is contained in:

Amitkumar Karwar 2013-10-22 15:24:46 -07:00 • committed by John W. Linville

parent 2636c308fd

commit 01c85adfff

1 changed files with 7 additions and 4 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

11

drivers/net/wireless/mwifiex/ie.c

View file