Searched hist:"0 c9e025e797e02c35449b3ad08d3317e5fc7d7b8" (Results 1 – 2 of 2) sorted by relevance
| /linux/drivers/net/wireless/intel/iwlwifi/fw/api/ |
| H A D | dbg-tlv.h | diff 0c9e025e797e02c35449b3ad08d3317e5fc7d7b8 Fri Apr 24 17:48:11 CEST 2020 Mordechay Goodstein <mordechay.goodstein@intel.com> iwlwifi: yoyo: don't access TLV before verifying len
If we access the TLV memory with shorter len than the struct
we access garbage data that was not given by the user.
On the way rewrite the checker in a cleaner way.
Signed-off-by: Mordechay Goodstein <mordechay.goodstein@intel.com>
Fixes: a9248de42464 ("iwlwifi: dbg_ini: add TLV allocation new API support")
Signed-off-by: Luca Coelho <luciano.coelho@intel.com>
Link: https://lore.kernel.org/r/iwlwifi.20200424182644.54418c829390.I15d6b462a0e69a280b6c6cfbcb6bcb05bb5f79ee@changeid
|
| /linux/drivers/net/wireless/intel/iwlwifi/ |
| H A D | iwl-dbg-tlv.c | diff 0c9e025e797e02c35449b3ad08d3317e5fc7d7b8 Fri Apr 24 17:48:11 CEST 2020 Mordechay Goodstein <mordechay.goodstein@intel.com> iwlwifi: yoyo: don't access TLV before verifying len
If we access the TLV memory with shorter len than the struct
we access garbage data that was not given by the user.
On the way rewrite the checker in a cleaner way.
Signed-off-by: Mordechay Goodstein <mordechay.goodstein@intel.com>
Fixes: a9248de42464 ("iwlwifi: dbg_ini: add TLV allocation new API support")
Signed-off-by: Luca Coelho <luciano.coelho@intel.com>
Link: https://lore.kernel.org/r/iwlwifi.20200424182644.54418c829390.I15d6b462a0e69a280b6c6cfbcb6bcb05bb5f79ee@changeid
|