]> www.infradead.org Git - users/hch/block.git/commit
projects / users / hch / block.git / commit
summary | shortlog | log | commit | commitdiff | tree
(parent: 4152561) | patch
cfg80211: wext: avoid copying malformed SSIDs
authorWill Deacon <will@kernel.org>
Fri, 4 Oct 2019 09:51:32 +0000 (10:51 +0100)
committerJohannes Berg <johannes.berg@intel.com>
Fri, 4 Oct 2019 12:04:08 +0000 (14:04 +0200)
commit4ac2813cc867ae563a1ba5a9414bfb554e5796fa
treece2debc1c58aec090511a3df0ac5ad9b5ef33a37tree
parent4152561f5da3fca92af7179dd538ea89e248f9d0commit | diff
cfg80211: wext: avoid copying malformed SSIDs

Ensure the SSID element is bounds-checked prior to invoking memcpy()
with its length field, when copying to userspace.

Cc: <stable@vger.kernel.org>
Cc: Kees Cook <keescook@chromium.org>
Reported-by: Nicolas Waisman <nico@semmle.com>
Signed-off-by: Will Deacon <will@kernel.org>
Link: https://lore.kernel.org/r/20191004095132.15777-2-will@kernel.org
[adjust commit log a bit]
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
net/wireless/wext-sme.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.