]> www.infradead.org Git - users/jedix/linux-maple.git/commit
ca8210: fix mac_len negative array access
authorAlexander Aring <aahringo@redhat.com>
Fri, 17 Feb 2023 04:25:04 +0000 (23:25 -0500)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 30 Mar 2023 10:49:16 +0000 (12:49 +0200)
commitfd176a18db96d574d8c4763708abcec4444a08b6
treeff312bb3907a70bae126b03119828955c76217c6
parentaee32b594f2c2332e73001938a174fb1403193f2
ca8210: fix mac_len negative array access

[ Upstream commit 6c993779ea1d0cccdb3a5d7d45446dd229e610a3 ]

This patch fixes a buffer overflow access of skb->data if
ieee802154_hdr_peek_addrs() fails.

Reported-by: lianhui tang <bluetlh@gmail.com>
Signed-off-by: Alexander Aring <aahringo@redhat.com>
Link: https://lore.kernel.org/r/20230217042504.3303396-1-aahringo@redhat.com
Signed-off-by: Stefan Schmidt <stefan@datenfreihafen.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/net/ieee802154/ca8210.c