Dan Carpenter <dan.carpenter@xxxxxxxxxx> wrote:
> The length of the key comes from the network and it's a 16 bit number. It
> needs to be capped to prevent a buffer overflow.
>
> Fixes: 5e6e3a92b9a4 ("wireless: mwifiex: initial commit for Marvell mwifiex driver")
> Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
> Acked-by: Ganapathi Bhat <ganapathi.bhat@xxxxxxx>
Patch applied to wireless-drivers-next.git, thanks.
e18696786548 mwifiex: Prevent memory corruption handling keys
--
https://patchwork.kernel.org/patch/11651443/
https://wireless.wiki.kernel.org/en/developers/documentation/submittingpatches
