On Fri, Feb 26, 2021 at 02:51:57PM +0000, Lee Gibson wrote: > Function _rtl92e_wx_set_scan calls memcpy without checking the length. > A user could control that length and trigger a buffer overflow. > Fix by checking the length is within the maximum allowed size. > > Reviewed-by: Dan Carpenter <[email protected]> > Signed-off-by: Lee Gibson <[email protected]> > ---
Thanks! regards, dan carpenter _______________________________________________ devel mailing list [email protected] http://driverdev.linuxdriverproject.org/mailman/listinfo/driverdev-devel
