projects / openwrt / staging / blogic.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 881bf28) | patch
Staging: rtl8192e: array overflow in rtl92e_set_swcam()
authorDan Carpenter <dan.carpenter@oracle.com>
Tue, 28 Jul 2015 15:48:21 +0000 (18:48 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 31 Jul 2015 23:18:43 +0000 (16:18 -0700)
commitd1f0f3118e55ad80136d19dd4afdb32ccba26a42
treee21e52d502771ca807e5a4e1e5deed271e14b3eetree | snapshot
parent881bf281237c3eaf7759040653e779c6cc6c2e00commit | diff
Staging: rtl8192e: array overflow in rtl92e_set_swcam()

"EntryNo" is comes from the user in the ioctl and it's a number between
0-255.  The ieee->swcamtable[] array only has 32 elements so it can
result in memory corruption.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/staging/rtl8192e/rtl8192e/rtl_cam.c diff | blob | history
John Crispins staging tree