linux-stable/drivers/net/wireless/marvell
Nicolai Stange ae7f404d92 libertas: make lbs_ibss_join_existing() return error code on rates overflow
[ Upstream commit 1754c4f60a ]

Commit e5e884b426 ("libertas: Fix two buffer overflows at parsing bss
descriptor") introduced a bounds check on the number of supplied rates to
lbs_ibss_join_existing() and made it to return on overflow.

However, the aforementioned commit doesn't set the return value accordingly
and thus, lbs_ibss_join_existing() would return with zero even though it
failed.

Make lbs_ibss_join_existing return -EINVAL in case the bounds check on the
number of supplied rates fails.

Fixes: e5e884b426 ("libertas: Fix two buffer overflows at parsing bss descriptor")
Signed-off-by: Nicolai Stange <nstange@suse.de>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-02-14 16:34:20 -05:00
..
libertas libertas: make lbs_ibss_join_existing() return error code on rates overflow 2020-02-14 16:34:20 -05:00
libertas_tf libertas_tf: Use correct channel range in lbtf_geo_init 2019-07-24 14:53:40 +03:00
mwifiex mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() 2020-02-14 16:34:20 -05:00
Kconfig treewide: Add SPDX license identifier - Makefile/Kconfig 2019-05-21 10:50:46 +02:00
Makefile treewide: Add SPDX license identifier - Makefile/Kconfig 2019-05-21 10:50:46 +02:00
mwl8k.c mwl8k: move spin_lock_bh to spin_lock in tasklet 2019-04-26 14:57:15 +03:00