kernel/linux
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ synced 2026-11-08 18:57:22 +00:00
Code Issues Releases Packages Activity
linux/drivers/staging
History
Zhang Shurong b1b04b5674 staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() 
commit 5f1c7031e0 upstream.

The "exc->key_len" is a u16 that comes from the user.  If it's over
IW_ENCODING_TOKEN_MAX (64) that could lead to memory corruption.

Fixes: b121d84882 ("staging: ks7010: simplify calls to memcpy()")
Cc: stable <stable@kernel.org>
Signed-off-by: Zhang Shurong <zhang_shurong@foxmail.com>
Reviewed-by: Dan Carpenter <dan.carpenter@linaro.org>
Link: https://lore.kernel.org/r/tencent_5153B668C0283CAA15AA518325346E026A09@qq.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
History 2023-08-03 10:26:05 +02:00
..
axis-fifo staging: axis-fifo: Convert to platform remove callback returning void 2023-04-03 21:49:54 +02:00
board staging: board: Fix uninitialized spinlock when attaching genpd 2021-07-21 11:22:15 +02:00
emxx_udc staging: emxx_udc: Convert to platform remove callback returning void 2023-04-03 21:49:54 +02:00
fbtft staging: Replace all spi->chip_select and spi->cs_gpiod references with function call 2023-03-11 12:34:05 +00:00
fieldbus Driver core changes for 6.4-rc1 2023-04-27 11:53:57 -07:00
gdm724x net: vlan: introduce skb_vlan_eth_hdr() 2023-04-23 14:16:44 +01:00
greybus Driver core changes for 6.4-rc1 2023-04-27 11:53:57 -07:00
iio Char/Misc drivers for 6.4-rc1 2023-04-27 12:07:50 -07:00
ks7010 staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() 2023-08-03 10:26:05 +02:00
media media: staging: atomisp: select V4L2_FWNODE 2023-08-03 10:25:48 +02:00
most staging: most: dim2: Convert to platform remove callback returning void 2023-04-03 21:49:54 +02:00
nvec staging: nvec_ps2: Convert to platform remove callback returning void 2023-04-03 21:49:55 +02:00
octeon staging: octeon: delete my name from TODO contact 2023-05-08 16:09:33 +02:00
olpc_dcon staging: olpc_dcon: Convert to i2c's .probe_new() 2022-11-22 13:23:25 +01:00
pi433 driver core: class: remove module * from class_create() 2023-03-17 15:16:33 +01:00
qlge Staging: qlge: Fix indentation in conditional statement 2023-03-16 09:44:31 +01:00
rtl8192e staging: rtl8192e: Fix W_DISABLE# does not work after stop/start 2023-04-20 13:55:20 +02:00
rtl8192u staging: rtl8192u: add '*/' on separate line in block comments 2023-03-28 13:34:49 +02:00
rtl8712 staging: r8712: Fix memory leak in _r8712_init_xmit_priv() 2023-08-03 10:26:05 +02:00
rtl8723bs staging: rtl8723bs: indent with tab, align with space 2023-04-05 16:37:10 +02:00
rts5208 Staging driver changes for 6.4-rc1 2023-04-27 11:49:35 -07:00
sm750fb staging/lynxfb: Use pci aperture helper 2023-04-04 14:55:55 +02:00
vc04_services staging: vchiq_arm: mark vchiq_platform_init() static 2023-07-19 16:36:30 +02:00
vme_user Driver core changes for 6.4-rc1 2023-04-27 11:53:57 -07:00
vt6655 staging: vt6655: remove unused bb_power_save_mode_off() function 2023-03-17 08:07:25 +01:00
vt6656 staging: vt6656: remove unused vnt_get_current_tsf() function 2023-03-17 08:07:23 +01:00
wlan-ng staging: wlan-ng: small cleanup in plugimage() 2023-03-16 09:43:51 +01:00
Kconfig staging: r8188eu: delete driver 2023-03-09 10:06:28 +01:00
Makefile staging: r8188eu: delete driver 2023-03-09 10:06:28 +01:00