mirror_ubuntu-kernels/drivers/net/wireless/intel
Mordechay Goodstein 0c9e025e79 iwlwifi: yoyo: don't access TLV before verifying len
If we access the TLV memory with shorter len than the struct
we access garbage data that was not given by the user.

On the way rewrite the checker in a cleaner way.

Signed-off-by: Mordechay Goodstein <mordechay.goodstein@intel.com>
Fixes: a9248de424 ("iwlwifi: dbg_ini: add TLV allocation new API support")
Signed-off-by: Luca Coelho <luciano.coelho@intel.com>
Link: https://lore.kernel.org/r/iwlwifi.20200424182644.54418c829390.I15d6b462a0e69a280b6c6cfbcb6bcb05bb5f79ee@changeid
2020-05-08 09:50:46 +03:00
..
ipw2x00 wireless-drivers-next patches for v5.8 2020-05-07 13:22:35 -07:00
iwlegacy mac80211: populate debugfs only after cfg80211 init 2020-04-24 11:30:13 +02:00
iwlwifi iwlwifi: yoyo: don't access TLV before verifying len 2020-05-08 09:50:46 +03:00
Kconfig treewide: Add SPDX license identifier - Makefile/Kconfig 2019-05-21 10:50:46 +02:00
Makefile treewide: Add SPDX license identifier - Makefile/Kconfig 2019-05-21 10:50:46 +02:00