Commit 6b89db36 authored Feb 05, 2014 by Maurizio Lombardi Committed by Greg Kroah-Hartman Feb 07, 2014

wlags49_h2: Fix overflow in wireless_set_essid()

This patch prevents the wireless_set_essid() function from overwriting
the last byte of the NetworkName buffer which must be NULL.

Signed-off-by: Maurizio Lombardi <mlombard@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

parent ad3815a5

drivers/staging/wlags49_h2/wl_wext.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -1061,7 +1061,7 @@ static int wireless_set_essid(struct net_device dev, struct iw_request_info in
		goto out;
		}

		if (data->flags != 0 && data->length > HCF_MAX_NAME_LEN + 1) {
		if (data->flags != 0 && data->length > HCF_MAX_NAME_LEN) {
		ret = -EINVAL;
		goto out;
		}