Staging: rtl8192e: array overflow in rtl92e_set_swcam()

Browse source

"EntryNo" is comes from the user in the ioctl and it's a number between
0-255.  The ieee->swcamtable[] array only has 32 elements so it can
result in memory corruption.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

...

This commit is contained in:

Dan Carpenter 2015-07-28 18:48:21 +03:00 • committed by Greg Kroah-Hartman

parent 881bf28123

commit d1f0f3118e

1 changed files with 4 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

4

drivers/staging/rtl8192e/rtl8192e/rtl_cam.c

View file