]> git.proxmox.com Git - mirror_ubuntu-hirsute-kernel.git/commit
staging: rtl8712: Fix possible buffer overflow in r8712_sitesurvey_cmd
authorLee Gibson <leegib@gmail.com>
Mon, 1 Mar 2021 13:26:48 +0000 (13:26 +0000)
committerSeth Forshee <seth.forshee@canonical.com>
Wed, 17 Mar 2021 18:48:56 +0000 (13:48 -0500)
commit9f3be2a4eb119f017ec0edbdebeb3abd5684e6fd
treea78009011d902b5d002a372f860f0cc250ca9612
parent32dfe49628c2a33e50b0c678f4c82568d1840809
staging: rtl8712: Fix possible buffer overflow in r8712_sitesurvey_cmd

BugLink: https://bugs.launchpad.net/bugs/1919492
commit b93c1e3981af19527beee1c10a2bef67a228c48c upstream.

Function r8712_sitesurvey_cmd calls memcpy without checking the length.
A user could control that length and trigger a buffer overflow.
Fix by checking the length is within the maximum allowed size.

Signed-off-by: Lee Gibson <leegib@gmail.com>
Link: https://lore.kernel.org/r/20210301132648.420296-1-leegib@gmail.com
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Seth Forshee <seth.forshee@canonical.com>
drivers/staging/rtl8712/rtl871x_cmd.c