]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/commit
iwlwifi: fw: harden page loading code
authorLuca Coelho <luciano.coelho@intel.com>
Tue, 13 Feb 2018 09:09:40 +0000 (11:09 +0200)
committerThadeu Lima de Souza Cascardo <cascardo@canonical.com>
Fri, 9 Nov 2018 19:00:27 +0000 (17:00 -0200)
commitf7370c6647373073e0970d934ab34d925aee0181
tree731fda736a9516d527998141ec54ba7d2446d441
parentbac3a6b946227a50036a198caf6ff9eb1af9af09
iwlwifi: fw: harden page loading code

BugLink: http://bugs.launchpad.net/bugs/1800537
commit 9039d985811d5b109b58b202b7594fd24e433fed upstream.

The page loading code trusts the data provided in the firmware images
a bit too much and may cause a buffer overflow or copy unknown data if
the block sizes don't match what we expect.

To prevent potential problems, harden the code by checking if the
sizes we are copying are what we expect.

Cc: stable@vger.kernel.org
Signed-off-by: Luca Coelho <luciano.coelho@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Kamal Mostafa <kamal@canonical.com>
Signed-off-by: Khalid Elmously <khalid.elmously@canonical.com>
drivers/net/wireless/intel/iwlwifi/fw/paging.c