Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 4ca5218e authored by Dan Carpenter's avatar Dan Carpenter Committed by Greg Kroah-Hartman
Browse files

Staging: vt6655-6: check keysize before memcpy() 



We need to check the we don't copy too much memory.  This comes from a
copy_from_user() in the ioctl.

Signed-off-by: default avatarDan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
parent 401c90e5

drivers/staging/vt6655/key.c

+3 −0
Original line number Diff line number Diff line
@@ -655,6 +655,9 @@ bool KeybSetDefaultKey ( 
        return (false);

    }



    if (uKeyLength > MAX_KEY_LEN)

	    return false;



    pTable->KeyTable[MAX_KEY_TABLE-1].bInUse = true;

    for(ii=0;ii<ETH_ALEN;ii++)

        pTable->KeyTable[MAX_KEY_TABLE-1].abyBSSID[ii] = 0xFF;

drivers/staging/vt6656/key.c

+3 −0
Original line number Diff line number Diff line
@@ -684,6 +684,9 @@ BOOL KeybSetDefaultKey( 
        return (FALSE);

    }



    if (uKeyLength > MAX_KEY_LEN)

	    return false;



    pTable->KeyTable[MAX_KEY_TABLE-1].bInUse = TRUE;

    for (ii = 0; ii < ETH_ALEN; ii++)

        pTable->KeyTable[MAX_KEY_TABLE-1].abyBSSID[ii] = 0xFF;