diff options
author | Dan Carpenter | 2012-03-29 08:43:54 +0200 |
---|---|---|
committer | Greg Kroah-Hartman | 2012-04-10 18:17:34 +0200 |
commit | 4ca5218e3939685c2325fc0a0a1ac8150272c93f (patch) | |
tree | fb56eb7e2f5d12f91c31923294815eb7476eb414 /drivers/staging/vt6656 | |
parent | staging/media/as102: Don't call release_firmware() on uninitialized variable (diff) | |
download | kernel-qcow2-linux-4ca5218e3939685c2325fc0a0a1ac8150272c93f.tar.gz kernel-qcow2-linux-4ca5218e3939685c2325fc0a0a1ac8150272c93f.tar.xz kernel-qcow2-linux-4ca5218e3939685c2325fc0a0a1ac8150272c93f.zip |
Staging: vt6655-6: check keysize before memcpy()
We need to check the we don't copy too much memory. This comes from a
copy_from_user() in the ioctl.
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/staging/vt6656')
-rw-r--r-- | drivers/staging/vt6656/key.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/drivers/staging/vt6656/key.c b/drivers/staging/vt6656/key.c index 27bb523c8a97..ee62a06a75f4 100644 --- a/drivers/staging/vt6656/key.c +++ b/drivers/staging/vt6656/key.c @@ -684,6 +684,9 @@ BOOL KeybSetDefaultKey( return (FALSE); } + if (uKeyLength > MAX_KEY_LEN) + return false; + pTable->KeyTable[MAX_KEY_TABLE-1].bInUse = TRUE; for (ii = 0; ii < ETH_ALEN; ii++) pTable->KeyTable[MAX_KEY_TABLE-1].abyBSSID[ii] = 0xFF; |