mwifiex: fix invalid memory access in mwifiex_update_autoindex_ies()
authorAmitkumar Karwar <akarwar@marvell.com>
Tue, 22 Oct 2013 22:24:46 +0000 (15:24 -0700)
committerJohn W. Linville <linville@tuxdriver.com>
Mon, 11 Nov 2013 19:38:57 +0000 (14:38 -0500)
commit01c85adfff5a8462aeea70796314c39dab1d9cc2
tree85168c8292f1bb2657b221c5a8fae007b2643c8c
parent2636c308fd720137d719c91da95adca2cd8f1c51
mwifiex: fix invalid memory access in mwifiex_update_autoindex_ies()

While parsing TLVs, return failure if number of remaining bytes
are less than current tlv length. This avoids invalid memory
access.

Signed-off-by: Amitkumar Karwar <akarwar@marvell.com>
Signed-off-by: Bing Zhao <bzhao@marvell.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
drivers/net/wireless/mwifiex/ie.c