net: wireless: bcmdhd: fix overrun in wl_run_escan
authorInsun Song <insun.song@broadcom.com>
Sat, 14 Jan 2017 00:25:59 +0000 (16:25 -0800)
committerManish Tuteja <mtuteja@nvidia.com>
Mon, 17 Apr 2017 23:56:54 +0000 (16:56 -0700)
commit09f665dfdf3cc09e5484f50732e26f351c9649f1
tree2c179965efda6581d96d323a83d5e1ac1a8ab565
parenta428a33208af05c6d4ce0b28897a9587135c4281
net: wireless: bcmdhd: fix overrun in wl_run_escan

prevent buffer overrun case where WLC_GET_VALID_CHANNELS IOCTL
 overriden by attacker and its return manipulated.

Bug 1887273
Bug 200288656

Signed-off-by: Insun Song <insun.song@broadcom.com>
Signed-off-by: Gagan Grover <ggrover@nvidia.com>
Change-Id: Ifbbaa3c2bdfd9bea7533d605303f18e17c8d85cc
Bug: 34197514
Reviewed-on: http://git-master/r/1459053
(cherry picked from commit aad3219daaaa44172f1c1ffeaf3447e230ef0f57)
Reviewed-on: http://git-master/r/1463481
Reviewed-by: Manish Tuteja <mtuteja@nvidia.com>
Tested-by: Manish Tuteja <mtuteja@nvidia.com>
drivers/net/wireless/bcmdhd/wl_cfg80211.c