diff options
| author | Jussi Kivilinna <jussi.kivilinna@mbnet.fi> | 2009-11-22 18:16:42 (GMT) |
|---|---|---|
| committer | John W. Linville <linville@tuxdriver.com> | 2009-11-23 22:05:40 (GMT) |
| commit | c1f8ca1d837148bf061d6ffa2038366e3cf0e4d7 (patch) | |
| tree | 99fca98ff500fedf95d68a0c6ae3772490d0d9ce /include/linux/netlink.h | |
| parent | 841507f5c1a5d2f196afb12e95eb11914f029832 (diff) | |
| download | linux-fsl-qoriq-c1f8ca1d837148bf061d6ffa2038366e3cf0e4d7.tar.xz | |
rndis_wlan: fix buffer overflow in rndis_query_oid
rndis_query_oid overwrites *len which stores buffer size to return full size
of received command and then uses *len with memcpy to fill buffer with
command.
Ofcourse memcpy should be done before replacing buffer size.
Signed-off-by: Jussi Kivilinna <jussi.kivilinna@mbnet.fi>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Diffstat (limited to 'include/linux/netlink.h')
0 files changed, 0 insertions, 0 deletions