Search Linux Wireless

Re: [PATCH] wl12xx: don't write out of bounds when hlid > WL12XX_MAX_LINKS

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, 2011-12-13 at 11:39 +0200, Luciano Coelho wrote: 
> We should not get an hlid value bigger than WL12XX_MAX_LINKS from
> wl1271_rx_handle_data().  We have a WARN_ON in case it happens.  But
> despite the warning, we would still go ahead and write the hlid bit
> into active_hlids (a stack variable).  This would cause us to
> overwrite other data in the stack.
> 
> To avoid this problem, we now skip the write when issuing the warning,
> so at least we don't corrupt data.
> 
> Signed-off-by: Luciano Coelho <coelho@xxxxxx>
> ---

Applied.

-- 
Cheers,
Luca.

--
To unsubscribe from this list: send the line "unsubscribe linux-wireless" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Linux Host AP]     [ATH6KL]     [Linux Bluetooth]     [Linux Netdev]     [Kernel Newbies]     [Linux Kernel]     [IDE]     [Security]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux ATA RAID]     [Samba]     [Device Mapper]
  Powered by Linux