Hi, this is fixes for a few spots that perform memcpy() without checking the source and the destination size in mwifiex driver, which may lead to buffer overflows or read over boundary. Takashi === Takashi Iwai (2): mwifiex: Fix possible buffer overflows at parsing bss descriptor mwifiex: Abort at too short BSS descriptor element drivers/net/wireless/marvell/mwifiex/scan.c | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) -- 2.16.4
