moonjuice/kernel_arpi
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Files
3f8f25c696f9c4e352a4d705ba767af676421564
kernel_arpi/drivers/staging
History
Dan Carpenter b65a2d8c86 Staging: rtl8723bs: prevent buffer overflow in update_sta_support_rate() 
The "ie_len" variable is in the 0-255 range and it comes from the
network.  If it's over NDIS_802_11_LENGTH_RATES_EX (16) then that will
lead to memory corruption.

Fixes: 554c0a3abf ("staging: Add rtl8723bs sdio wifi driver")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Cc: stable <stable@vger.kernel.org>
Link: https://lore.kernel.org/r/20200603101958.GA1845750@mwanda
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-06-16 21:25:38 +02:00
..
android
mmap locking API: convert mmap_sem comments
2020-06-09 09:39:14 -07:00
axis-fifo
…
board
…
clocking-wizard
…
comedi
mmap locking API: convert mmap_sem comments
2020-06-09 09:39:14 -07:00
emxx_udc
…
fbtft
staging: fbtft: fb_st7789v: make HSD20_IPS numeric and not a string
2020-05-22 10:48:32 +02:00
fieldbus
…
fsl-dpaa2
Merge tag 'staging-5.8-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging
2020-06-07 10:45:08 -07:00
fwserial
…
gasket
…
gdm724x
…
goldfish
…
greybus
treewide: replace '---help---' in Kconfig files with 'help'
2020-06-14 01:57:21 +09:00
gs_fpgaboot
…
iio
Merge 5.7-rc7 into staging-next
2020-05-25 09:11:19 +02:00
kpc2000
mmap locking API: use coccinelle to convert mmap_sem rwsem call sites
2020-06-09 09:39:14 -07:00
ks7010
…
media
Merge tag 'kbuild-v5.8-2' of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild
2020-06-13 13:29:16 -07:00
most
treewide: replace '---help---' in Kconfig files with 'help'
2020-06-14 01:57:21 +09:00
mt7621-dma
…
mt7621-dts
…
mt7621-pci
…
mt7621-pci-phy
…
mt7621-pinctrl
…
netlogic
…
nvec
…
octeon
…
octeon-usb
…
olpc_dcon
…
pi433
…
qlge
…
ralink-gdma
…
rtl8188eu
staging: rtl8188eu: make some arrays static const
2020-05-27 10:16:34 +02:00
rtl8192e
staging/rtl8192e: Remove function callback casts
2020-05-27 10:16:34 +02:00
rtl8192u
…
rtl8712
staging: rtl8712: Fix IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK
2020-05-27 10:16:33 +02:00
rtl8723bs
Staging: rtl8723bs: prevent buffer overflow in update_sta_support_rate()
2020-06-16 21:25:38 +02:00
rts5208
…
sm750fb
staging: sm750fb: Add names to proc_setBLANK args
2020-05-29 12:35:59 +02:00
speakup
…
unisys
…
vc04_services
staging: vchiq: Get rid of VCHIQ_SERVICE_OPENEND callback reason
2020-05-27 14:04:32 +02:00
vme
…
vt6655
…
vt6656
staging: vt6656: Fix warning: unused variable vnt_frame_time
2020-05-27 12:23:11 +02:00
wfx
staging: wfx: fix coherency of hif_scan() prototype
2020-06-16 21:22:51 +02:00
wilc1000
Merge tag 'staging-5.8-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging
2020-06-07 10:45:08 -07:00
wlan-ng
…
Kconfig
treewide: replace '---help---' in Kconfig files with 'help'
2020-06-14 01:57:21 +09:00
Makefile
…