linux-stable/drivers/staging/ks7010
Zhang Shurong 5f1c7031e0 staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()
The "exc->key_len" is a u16 that comes from the user.  If it's over
IW_ENCODING_TOKEN_MAX (64) that could lead to memory corruption.

Fixes: b121d84882 ("staging: ks7010: simplify calls to memcpy()")
Cc: stable <stable@kernel.org>
Signed-off-by: Zhang Shurong <zhang_shurong@foxmail.com>
Reviewed-by: Dan Carpenter <dan.carpenter@linaro.org>
Link: https://lore.kernel.org/r/tencent_5153B668C0283CAA15AA518325346E026A09@qq.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2023-07-27 09:54:33 +02:00
..
Kconfig staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC 2021-10-13 15:10:21 +02:00
Makefile
TODO staging: ks7010: Update the TODO file for this driver 2022-10-22 09:58:50 +02:00
eap_packet.h
ks7010_sdio.c staging/ks7010: Remove redundant 'flush_workqueue()' calls 2022-02-15 17:05:43 +01:00
ks_hostif.c staging: ks7010: fix line ending with '(' 2023-03-25 09:47:56 +01:00
ks_hostif.h
ks_wlan.h staging/ks7010: replace SME taslet with work 2022-04-12 15:53:50 +02:00
ks_wlan_ioctl.h
ks_wlan_net.c staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() 2023-07-27 09:54:33 +02:00