diff options
| author |   Dan Carpenter <dan.carpenter@oracle.com> | 2017-04-22 13:47:23 +0300 |
|---|---|---|
| committer |   Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2017-04-28 12:30:20 +0200 |
| commit | 784047eb2d3405a35087af70cba46170c5576b25 (patch) | |
| tree | 79874ce8383a3fe904c6a2fc688142d3f1521baa /drivers/staging/rtl8188eu | |
| parent | staging: rtl8192u: fix spelling mistake in variable name *attentuation (diff) | |
| download | linux-dev-784047eb2d3405a35087af70cba46170c5576b25.tar.xz linux-dev-784047eb2d3405a35087af70cba46170c5576b25.zip | |
staging: rtl8188eu: prevent an underflow in rtw_check_beacon_data()
The "len" could be as low as -14 so we should check for negatives.
Fixes: 9a7fe54ddc3a ("staging: r8188eu: Add source files for new driver - part 1")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/staging/rtl8188eu')
| -rw-r--r-- | drivers/staging/rtl8188eu/core/rtw_ap.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/staging/rtl8188eu/core/rtw_ap.c b/drivers/staging/rtl8188eu/core/rtw_ap.c index 91156a21b8f2..519b4d3584a2 100644 --- a/drivers/staging/rtl8188eu/core/rtw_ap.c +++ b/drivers/staging/rtl8188eu/core/rtw_ap.c @@ -878,7 +878,7 @@ int rtw_check_beacon_data(struct adapter *padapter, u8 *pbuf, int len) return _FAIL; - if (len > MAX_IE_SZ) + if (len < 0 || len > MAX_IE_SZ) return _FAIL; pbss_network->IELength = len; |