staging: vt6655: buffer overflow in ioctl
authorDan Carpenter <dan.carpenter@oracle.com>
Fri, 19 Sep 2014 10:43:11 +0000 (13:43 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 19 Sep 2014 22:32:20 +0000 (15:32 -0700)
commited87c2b2e7dd34016017af183b8f3fbe28179bc1
treefc75ae737183ec9db5ee54ccaff24137661e0592
parent922b83b4aaae5d6071a1ede88c04bfa834fa5119
staging: vt6655: buffer overflow in ioctl

->u.generic_elem.len is a user controlled number between 0-255.  We
should limit it to avoid memory corruption.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/staging/vt6655/hostap.c