Dan Carpenter b65a2d8c86 Staging: rtl8723bs: prevent buffer overflow in update_sta_support_rate() ... The "ie_len" variable is in the 0-255 range and it comes from the network. If it's over NDIS_802_11_LENGTH_RATES_EX (16) then that will lead to memory corruption. Fixes: 554c0a3abf ("staging: Add rtl8723bs sdio wifi driver") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Cc: stable <stable@vger.kernel.org> Link: https://lore.kernel.org/r/20200603101958.GA1845750@mwanda Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2020-06-16 21:25:38 +02:00
..
android	mmap locking API: convert mmap_sem comments	2020-06-09 09:39:14 -07:00
axis-fifo
board
clocking-wizard
comedi	mmap locking API: convert mmap_sem comments	2020-06-09 09:39:14 -07:00
emxx_udc
fbtft
fieldbus
fsl-dpaa2	Staging/IIO driver patches for 5.8-rc1	2020-06-07 10:45:08 -07:00
fwserial
gasket
gdm724x
goldfish
greybus	treewide: replace '---help---' in Kconfig files with 'help'	2020-06-14 01:57:21 +09:00
gs_fpgaboot
iio
kpc2000	mmap locking API: use coccinelle to convert mmap_sem rwsem call sites	2020-06-09 09:39:14 -07:00
ks7010
media	Kbuild updates for v5.8 (2nd)	2020-06-13 13:29:16 -07:00
most	treewide: replace '---help---' in Kconfig files with 'help'	2020-06-14 01:57:21 +09:00
mt7621-dma
mt7621-dts
mt7621-pci
mt7621-pci-phy
mt7621-pinctrl
netlogic
nvec
octeon
octeon-usb
olpc_dcon
pi433
qlge
ralink-gdma
rtl8188eu
rtl8192e
rtl8192u
rtl8712
rtl8723bs	Staging: rtl8723bs: prevent buffer overflow in update_sta_support_rate()	2020-06-16 21:25:38 +02:00
rts5208
sm750fb	staging: sm750fb: Add names to proc_setBLANK args	2020-05-29 12:35:59 +02:00
speakup
unisys
vc04_services
vme
vt6655
vt6656
wfx	staging: wfx: fix coherency of hif_scan() prototype	2020-06-16 21:22:51 +02:00
wilc1000	Staging/IIO driver patches for 5.8-rc1	2020-06-07 10:45:08 -07:00
wlan-ng
Kconfig	treewide: replace '---help---' in Kconfig files with 'help'	2020-06-14 01:57:21 +09:00
Makefile