]> git.kernelconcepts.de Git - karo-tx-linux.git/commit
projects / karo-tx-linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8dc186c) | patch
libertas: fix buffer overrun
authorJohannes Berg <johannes@sipsolutions.net>
Sun, 2 Nov 2008 19:30:21 +0000 (19:30 +0000)
committerGreg Kroah-Hartman <gregkh@suse.de>
Fri, 7 Nov 2008 03:05:40 +0000 (19:05 -0800)
commit1d2f30b7474b2607276d10b28af2bde423b6e609
treea8812464798f1f0a8963263b47700082deef6548tree | snapshot
parent8dc186c1029b87183947df1cbcb4ad5cbd5eb59ecommit | diff
libertas: fix buffer overrun

commit 48735d8d8bd701b1e0cd3d49c21e5e385ddcb077 upstream

If somebody sends an invalid beacon/probe response, that can trash the
whole BSS descriptor. The descriptor is, luckily, large enough so that
it cannot scribble past the end of it; it's well above 400 bytes long.

Signed-off-by: Johannes Berg <johannes@sipsolutions.net>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
drivers/net/wireless/libertas/scan.c diff | blob | history
Linux kernel for KaRo TX COM modules