linux/drivers/net/wireless
Emmanuel Grumbach 870171899d wifi: iwlwifi: fix a memory corruption
commit cf4a0d840e upstream.

iwl_fw_ini_trigger_tlv::data is a pointer to a __le32, which means that
if we copy to iwl_fw_ini_trigger_tlv::data + offset while offset is in
bytes, we'll write past the buffer.

Cc: stable@vger.kernel.org
Closes: https://bugzilla.kernel.org/show_bug.cgi?id=218233
Fixes: cf29c5b66b ("iwlwifi: dbg_ini: implement time point handling")
Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
Signed-off-by: Miri Korenblit <miriam.rachel.korenblit@intel.com>
Link: https://msgid.link/20240111150610.2d2b8b870194.I14ed76505a5cf87304e0c9cc05cc0ae85ed3bf91@changeid
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
History 2024-01-31 16:19:06 -08:00
..
admtek wifi: mac80211: add wake_tx_queue callback to drivers 2022-10-10 11:00:03 +02:00
ath wifi: ath11k: Defer on rproc_get failure 2024-01-25 15:35:19 -08:00
atmel Fix nomenclature for USB and PCI wireless devices 2023-08-25 12:56:49 +03:00
broadcom wifi: brcmfmac: Replace 1-element arrays with flexible arrays 2023-09-18 16:20:21 +03:00
cisco wifi: airo: avoid uninitialized warning in airo_get_rate() 2023-07-11 19:22:54 -07:00
intel wifi: iwlwifi: fix a memory corruption 2024-01-31 16:19:06 -08:00
intersil Fix nomenclature for USB and PCI wireless devices 2023-08-25 12:56:49 +03:00
legacy Fix nomenclature for USB and PCI wireless devices 2023-08-25 12:56:49 +03:00
marvell wifi: mwifiex: fix uninitialized firmware_stat 2024-01-25 15:35:47 -08:00
mediatek wifi: mt76: fix broken precal loading from MTD for mt7915 2024-01-25 15:35:47 -08:00
microchip wifi: wilc1000: use vmm_table as array in wilc struct 2023-11-28 17:20:02 +00:00
purelifi wifi: plfxlc: check for allocation failure in plfxlc_usb_wreq_async() 2024-01-25 15:35:19 -08:00
quantenna wifi: qtnfmac: use struct_size and size_sub for payload length 2023-03-13 15:44:29 +02:00
ralink Fix nomenclature for USB and PCI wireless devices 2023-08-25 12:56:49 +03:00
realtek wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors 2024-01-25 15:35:47 -08:00
rsi wifi: rsi: rsi_91x_usb_ops: Remove unnecessary (void*) conversions 2023-08-23 14:07:16 +03:00
silabs wifi: wfx: fix case where rates are out of order 2023-11-20 11:59:00 +01:00
st net: Replace all spi->chip_select and spi->cs_gpiod references with function call 2023-03-11 12:34:02 +00:00
ti wifi: wlcore: sdio: Use module_sdio_driver macro to simplify the code 2023-08-25 12:59:31 +03:00
virtual wifi: mac80211_hwsim: fix clang-specific fortify warning 2023-11-28 17:19:37 +00:00
zydas Fix nomenclature for USB and PCI wireless devices 2023-08-25 12:56:49 +03:00
Kconfig wifi: move raycs, wl3501 and rndis_wlan to legacy directory 2023-03-13 15:42:14 +02:00
Makefile wifi: move raycs, wl3501 and rndis_wlan to legacy directory 2023-03-13 15:42:14 +02:00