mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-08-26 10:49:33 +00:00
![]() We can't handle the case length > WLAN_DATA_MAXLEN. Because the size of rxfrm->data is WLAN_DATA_MAXLEN(2312), and we can't read more than that. Thanks-to: Hillf Danton <hdanton@sina.com> Reported-and-tested-by: syzbot+7d42d68643a35f71ac8a@syzkaller.appspotmail.com Signed-off-by: Qiujun Huang <hqjagain@gmail.com> Cc: stable <stable@vger.kernel.org> Link: https://lore.kernel.org/r/20200326131850.17711-1-hqjagain@gmail.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> |
||
---|---|---|
.. | ||
cfg80211.c | ||
hfa384x.h | ||
hfa384x_usb.c | ||
Kconfig | ||
Makefile | ||
p80211conv.c | ||
p80211conv.h | ||
p80211hdr.h | ||
p80211ioctl.h | ||
p80211metadef.h | ||
p80211metastruct.h | ||
p80211mgmt.h | ||
p80211msg.h | ||
p80211netdev.c | ||
p80211netdev.h | ||
p80211req.c | ||
p80211req.h | ||
p80211types.h | ||
p80211wep.c | ||
prism2fw.c | ||
prism2mgmt.c | ||
prism2mgmt.h | ||
prism2mib.c | ||
prism2sta.c | ||
prism2usb.c | ||
README |
TODO: - checkpatch.pl cleanups - sparse warnings - move to use the in-kernel wireless stack Please send any patches or complaints about this driver to Greg Kroah-Hartman <greg@kroah.com> and don't bother the upstream wireless kernel developers about it, they want nothing to do with it.