projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 62a25dc) | patch
libertas_tf: prevent underflow in process_cmdrequest()
authorDan Carpenter <dan.carpenter@oracle.com>
Tue, 14 Aug 2018 09:07:48 +0000 (12:07 +0300)
committerKalle Valo <kvalo@codeaurora.org>
Fri, 31 Aug 2018 15:43:36 +0000 (18:43 +0300)
commit3348ef6a6a126706d6a73ed40c18d8033df72783
treea23bddefdb4f2287260537d21bc3c110cc45ceeetree
parent62a25dc56990a382afeb40891eead0dbf8b598b4commit | diff
libertas_tf: prevent underflow in process_cmdrequest()

If recvlength is less than MESSAGE_HEADER_LEN (4) we would end up
corrupting memory.

Fixes: c305a19a0d0a ("libertas_tf: usb specific functions")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
drivers/net/wireless/marvell/libertas_tf/if_usb.c diff | blob | history