linux-uconsole/drivers/staging
Haggai Eran 38559326b1 staging: rtl8712: prevent buffer overrun in recvbuf2recvframe
commit cab462140f upstream.

With an RTL8191SU USB adaptor, sometimes the hints for a fragmented
packet are set, but the packet length is too large. Allocate enough
space to prevent memory corruption and a resulting kernel panic [1].

[1] http://www.spinics.net/lists/linux-wireless/msg136546.html

Signed-off-by: Haggai Eran <haggai.eran@gmail.com>
ACKed-by: Larry Finger <Larry.Finger@lwfinger.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2015-08-03 09:29:42 -07:00
..
android staging: binder: Fix death notifications 2014-03-06 21:30:11 -08:00
asus_oled
bcm Staging: bcm: info leak in ioctl 2013-11-13 12:05:33 +09:00
ced1401
comedi staging: comedi: cb_pcidas64: fix incorrect AI range code handling 2015-03-18 13:22:34 +01:00
cptm1217
crystalhd
csr staging: single_open() leaks 2013-05-05 00:15:43 -04:00
cxt1e1 staging: single_open() leaks 2013-05-05 00:15:43 -04:00
dgrp Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs 2013-05-01 17:51:54 -07:00
dwc2 staging: dwc2: fix value of dma_mask 2013-05-30 21:14:30 +09:00
echo
et131x
frontier
ft1000 staging: single_open() leaks 2013-05-05 00:15:43 -04:00
fwserial TTY/Serial driver update for 3.10-rc1 2013-04-29 12:16:17 -07:00
gdm72xx USB: remove remaining instances of USB_SUSPEND 2013-05-15 13:44:44 -04:00
goldfish
iio staging:iio:ade7758: Remove "raw" from channel name 2014-11-14 08:47:58 -08:00
imx-drm imx-drm: imx-drm-core: Export imx_drm_encoder_get_mux_id 2013-09-07 22:10:00 -07:00
keucr
line6 staging: line6: Fix unlocked snd_pcm_stop() call 2013-07-25 14:07:42 -07:00
media media: lirc_zilog: Don't use dynamic static allocation 2013-12-04 10:57:32 -08:00
netlogic
nvec Staging driver fixes for 3.10-rc2 2013-05-23 09:27:49 -07:00
octeon
olpc_dcon
ozwpan ozwpan: unchecked signed subtraction leads to DoS 2015-06-22 16:55:54 -07:00
panel staging: panel: fix lcd type 2015-05-13 05:15:42 -07:00
phison
quickstart
rtl8187se staging: rtl8712, rtl8712: avoid lots of build warnings 2015-06-05 23:19:53 -07:00
rtl8192e staging, rtl8192e, LLVMLinux: Remove unused inline prototype 2015-06-05 23:19:53 -07:00
rtl8192u staging: rtl8712, rtl8712: avoid lots of build warnings 2015-06-05 23:19:53 -07:00
rtl8712 staging: rtl8712: prevent buffer overrun in recvbuf2recvframe 2015-08-03 09:29:42 -07:00
rts5139 Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs 2013-05-01 17:51:54 -07:00
sb105x Staging: sb105x: info leak in mp_get_count() 2013-11-13 12:05:33 +09:00
sbe-2t3e3
sep staging: sep: fix driver build and kconfig 2013-05-16 15:37:49 -07:00
serqt_usb2 staging:serqt_usb2: Fix sparse warning restricted __le16 degrades to integer 2014-05-06 07:55:28 -07:00
silicom Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs 2013-05-01 17:51:54 -07:00
slicoss
sm7xxfb
speakup Staging: speakup: Update __speakup_paste_selection() tty (ab)usage to match vt 2014-09-05 16:28:36 -07:00
ste_rmi4 staging: ste_rmi4: Suppress 'ignoring return value of ‘regulator_enable()' warning 2013-05-16 15:37:49 -07:00
ti-soc-thermal
tidspbridge staging: tidspbridge: check for CONFIG_SND_OMAP_SOC_MCBSP 2014-06-30 20:09:41 -07:00
usbip
vme
vt6655 vt6655: RFbSetPower fix missing rate RATE_12M 2015-04-13 14:02:12 +02:00
vt6656 staging: vt6656: CARDqGetNextTBTT correct uLowNextTBTT 2014-02-06 11:08:14 -08:00
winbond
wlags49_h2 staging: wlags49_h2: fix extern inline functions 2015-06-05 23:19:53 -07:00
wlags49_h25
wlan-ng
xgifb
zcache staging: zcache: fix "zcache=" kernel parameter 2013-08-14 22:59:06 -07:00
zram zram: allow request end to coincide with disksize 2013-08-14 22:59:09 -07:00
zsmalloc staging: zsmalloc: Ensure handle is never 0 on success 2013-12-04 10:55:47 -08:00
Kconfig staging: Swap zram and zsmalloc in Kconfig 2013-05-16 15:38:58 -07:00
Makefile
staging.c