Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 29eca8b7 authored by Polaris Pi's avatar Polaris Pi Committed by Greg Kroah-Hartman
Browse files

wifi: mwifiex: Fix OOB and integer underflow when rx packets



[ Upstream commit 11958528161731c58e105b501ed60b83a91ea941 ]

Make sure mwifiex_process_mgmt_packet,
mwifiex_process_sta_rx_packet and mwifiex_process_uap_rx_packet,
mwifiex_uap_queue_bridged_pkt and mwifiex_process_rx_packet
not out-of-bounds access the skb->data buffer.

Fixes: 2dbaf751 ("mwifiex: report received management frames to cfg80211")
Signed-off-by: default avatarPolaris Pi <pinkperfect2021@gmail.com>
Reviewed-by: default avatarMatthew Wang <matthewmwang@chromium.org>
Reviewed-by: default avatarBrian Norris <briannorris@chromium.org>
Signed-off-by: default avatarKalle Valo <kvalo@kernel.org>
Link: https://lore.kernel.org/r/20230723070741.1544662-1-pinkperfect2021@gmail.com


Signed-off-by: default avatarSasha Levin <sashal@kernel.org>
parent 042aeb45
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment