wil6210: missing length check in wmi_set_ie
authorLior David <qca_liord@qca.qualcomm.com>
Tue, 14 Nov 2017 13:25:39 +0000 (15:25 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 5 Dec 2018 18:41:11 +0000 (19:41 +0100)
commit107b02c81a8761f1f7efc1e8b54d435324ccd13e
tree8ed58b8266954701387d83e98cd7faf80991f2c0
parent39d9e1c62e3f8b5569a0d9bf4d47a3d5d8ae02e2
wil6210: missing length check in wmi_set_ie

commit b5a8ffcae4103a9d823ea3aa3a761f65779fbe2a upstream.

Add a length check in wmi_set_ie to detect unsigned integer
overflow.

Signed-off-by: Lior David <qca_liord@qca.qualcomm.com>
Signed-off-by: Maya Erez <qca_merez@qca.qualcomm.com>
Signed-off-by: Kalle Valo <kvalo@qca.qualcomm.com>
Signed-off-by: Ben Hutchings <ben.hutchings@codethink.co.uk>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/net/wireless/ath/wil6210/wmi.c