ath10k: add sanity check to ie_len before parsing fw/board ie
authorRyan Hsu <ryanhsu@codeaurora.org>
Tue, 16 Jan 2018 09:43:49 +0000 (11:43 +0200)
committerKalle Valo <kvalo@codeaurora.org>
Tue, 16 Jan 2018 14:31:12 +0000 (16:31 +0200)
commit9ed4f91628737c820af6a1815b65bc06bd31518f
treef4d27a0a835278f20965857a1939a945303f3621
parent3153b68e4d1a0b6c9d75cf4fe419229890ee15d5
ath10k: add sanity check to ie_len before parsing fw/board ie

Validate ie_len after the alignment padding before access the buffer
to avoid potential overflow.

Signed-off-by: Ryan Hsu <ryanhsu@codeaurora.org>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
drivers/net/wireless/ath/ath10k/core.c