diff options
author | Dan Carpenter <[email protected]> | 2021-04-14 11:29:55 +0300 |
---|---|---|
committer | Kalle Valo <[email protected]> | 2021-04-17 20:35:44 +0300 |
commit | 260a9ad9446723d4063ed802989758852809714d (patch) | |
tree | c0dbe4497193fad4013e29fcf50b1b7421763b56 /tools/perf/scripts/python | |
parent | e9642be26a372013e47801e1dd98e8f4dcf78f50 (diff) |
ipw2x00: potential buffer overflow in libipw_wx_set_encodeext()
The "ext->key_len" is a u16 that comes from the user. If it's over
SCM_KEY_LEN (32) that could lead to memory corruption.
Fixes: e0d369d1d969 ("[PATCH] ieee82011: Added WE-18 support to default wireless extension handler")
Cc: [email protected]
Signed-off-by: Dan Carpenter <[email protected]>
Acked-by: Stanislav Yakovlev <[email protected]>
Signed-off-by: Kalle Valo <[email protected]>
Link: https://lore.kernel.org/r/YHaoA1i+8uT4ir4h@mwanda
Diffstat (limited to 'tools/perf/scripts/python')
0 files changed, 0 insertions, 0 deletions