diff options
| author |   Phil Turnbull <philipturnbull@github.com> | 2022-11-23 10:35:43 -0500 |
|---|---|---|
| committer |   Kalle Valo <kvalo@kernel.org> | 2022-11-24 18:11:23 +0200 |
| commit | 0cdfa9e6f0915e3d243e2393bfa8a22e12d553b0 (patch) | |
| tree | 7164ee3d4cfec98aeb586415ec587c6fa30e5315 /drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | |
| parent | wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute (diff) | |
| download | wireguard-linux-0cdfa9e6f0915e3d243e2393bfa8a22e12d553b0.tar.xz wireguard-linux-0cdfa9e6f0915e3d243e2393bfa8a22e12d553b0.zip | |
wifi: wilc1000: validate number of channels
There is no validation of 'e->no_of_channels' which can trigger an
out-of-bounds write in the following 'memset' call. Validate that the
number of channels does not extends beyond the size of the channel list
element.
Signed-off-by: Phil Turnbull <philipturnbull@github.com>
Tested-by: Ajay Kathat <ajay.kathat@microchip.com>
Acked-by: Ajay Kathat <ajay.kathat@microchip.com>
Signed-off-by: Kalle Valo <kvalo@kernel.org>
Link: https://lore.kernel.org/r/20221123153543.8568-5-philipturnbull@github.com
Diffstat (limited to 'drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c')
0 files changed, 0 insertions, 0 deletions