From: Qing Xu <m1s5p6688@xxxxxxxxx> Hi, this is fixes for a few spots that perform memcpy() without checking the source and the destination size in mwifiex driver, which may lead to buffer overflows or read over boundary. Qing Xu === Qing Xu (2): mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() drivers/net/wireless/marvell/mwifiex/scan.c | 7 +++++++ drivers/net/wireless/marvell/mwifiex/wmm.c | 4 ++++ 2 files changed, 11 insertions(+) -- 2.17.1