diff options
| author |   Lyes Bourennani <lbourennani@fuzzinglabs.com> | 2026-04-22 00:20:22 +0200 |
|---|---|---|
| committer |   Sven Eckelmann <sven@narfation.org> | 2026-05-02 21:58:27 +0200 |
| commit | 0799e5943611006b346b8813c7daf7dd5aa26bfd (patch) | |
| tree | 2c8f90ba922babc0ee54b9ef5a1eb09996e2ce9b /include/linux/clk/ssh:/git@git.zx2c4.com | |
| parent | Fix mismerge of the arm64 / timer-core interrupt handling changes (diff) | |
batman-adv: fix integer overflow on buff_pos
Fixing an integer overflow present in batadv_iv_ogm_send_to_if. The size
check is done using the int type in batadv_iv_ogm_aggr_packet whereas the
buff_pos variable uses the s16 type. This could lead to an out-of-bound
read.
Cc: stable@vger.kernel.org
Fixes: c6c8fea29769 ("net: Add batman-adv meshing protocol")
Signed-off-by: Lyes Bourennani <lbourennani@fuzzinglabs.com>
Signed-off-by: Alexis Pinson <apinson@fuzzinglabs.com>
Signed-off-by: Sven Eckelmann <sven@narfation.org>
Diffstat (limited to 'include/linux/clk/ssh:/git@git.zx2c4.com')
0 files changed, 0 insertions, 0 deletions