diff options
| author |   Wen Huang <huangwenabc@gmail.com> | 2019-08-28 10:07:51 +0800 |
|---|---|---|
| committer |   Kalle Valo <kvalo@codeaurora.org> | 2019-09-03 16:50:21 +0300 |
| commit | 7caac62ed598a196d6ddf8d9c121e12e082cac3a (patch) | |
| tree | 926f8c0a3bb5c8cff8ee3a1d5d8a4a85e94e853b /net/core/skbuff.c | |
| parent | mt76: mt76x0e: disable 5GHz band for MT7630E (diff) | |
| download | wireguard-linux-7caac62ed598a196d6ddf8d9c121e12e082cac3a.tar.xz wireguard-linux-7caac62ed598a196d6ddf8d9c121e12e082cac3a.zip | |
mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings
mwifiex_update_vs_ie(),mwifiex_set_uap_rates() and
mwifiex_set_wmm_params() call memcpy() without checking
the destination size.Since the source is given from
user-space, this may trigger a heap buffer overflow.
Fix them by putting the length check before performing memcpy().
This fix addresses CVE-2019-14814,CVE-2019-14815,CVE-2019-14816.
Signed-off-by: Wen Huang <huangwenabc@gmail.com>
Acked-by: Ganapathi Bhat <gbhat@marvell.comg>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Diffstat (limited to 'net/core/skbuff.c')
0 files changed, 0 insertions, 0 deletions