diff options
| author | Phil Turnbull <philipturnbull@github.com> | 2022-11-23 10:35:43 -0500 |
|---|---|---|
| committer | Kalle Valo <kvalo@kernel.org> | 2022-11-24 18:11:23 +0200 |
| commit | 0cdfa9e6f0915e3d243e2393bfa8a22e12d553b0 (patch) | |
| tree | 7164ee3d4cfec98aeb586415ec587c6fa30e5315 /net/wireless | |
| parent | f9b62f9843c7b0afdaecabbcebf1dbba18599408 (diff) | |
| download | linux-0cdfa9e6f0915e3d243e2393bfa8a22e12d553b0.tar.gz linux-0cdfa9e6f0915e3d243e2393bfa8a22e12d553b0.tar.bz2 linux-0cdfa9e6f0915e3d243e2393bfa8a22e12d553b0.zip | |
wifi: wilc1000: validate number of channels
There is no validation of 'e->no_of_channels' which can trigger an
out-of-bounds write in the following 'memset' call. Validate that the
number of channels does not extends beyond the size of the channel list
element.
Signed-off-by: Phil Turnbull <philipturnbull@github.com>
Tested-by: Ajay Kathat <ajay.kathat@microchip.com>
Acked-by: Ajay Kathat <ajay.kathat@microchip.com>
Signed-off-by: Kalle Valo <kvalo@kernel.org>
Link: https://lore.kernel.org/r/20221123153543.8568-5-philipturnbull@github.com
Diffstat (limited to 'net/wireless')
0 files changed, 0 insertions, 0 deletions