diff options
| author |   Dan Carpenter <dan.carpenter@oracle.com> | 2013-10-29 23:00:15 +0300 |
|---|---|---|
| committer |   Linus Torvalds <torvalds@linux-foundation.org> | 2013-10-30 12:24:49 -0700 |
| commit | b5e2f339865fb443107e5b10603e53bbc92dc054 (patch) | |
| tree | 1d6d0b95d4efb6894cfc1d7c13c731e287da4278 /drivers/staging/bcm/Bcmchar.c | |
| parent | aacraid: missing capable() check in compat ioctl (diff) | |
| download | linux-dev-b5e2f339865fb443107e5b10603e53bbc92dc054.tar.xz linux-dev-b5e2f339865fb443107e5b10603e53bbc92dc054.zip | |
staging: wlags49_h2: buffer overflow setting station name
We need to check the length parameter before doing the memcpy(). I've
actually changed it to strlcpy() as well so that it's NUL terminated.
You need CAP_NET_ADMIN to trigger these so it's not the end of the
world.
Reported-by: Nico Golde <nico@ngolde.de>
Reported-by: Fabian Yamaguchi <fabs@goesec.de>
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Cc: stable@kernel.org
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Diffstat (limited to '')
0 files changed, 0 insertions, 0 deletions