Commit ab1fed0c authored by Pin-yen Lin's avatar Pin-yen Lin Committed by Yongqiang Liu
Browse files

wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet

stable inclusion
from stable-v5.10.198
commit 10a18c8bac7f60d32b7af22da03b66f350beee38
category: bugfix
bugzilla: https://gitee.com/src-openeuler/kernel/issues/I95AXH
CVE: CVE-2023-52525

Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=10a18c8bac7f60d32b7af22da03b66f350beee38



--------------------------------

[ Upstream commit aef7a030 ]

Only skip the code path trying to access the rfc1042 headers when the
buffer is too small, so the driver can still process packets without
rfc1042 headers.

Fixes: 11958528 ("wifi: mwifiex: Fix OOB and integer underflow when rx packets")
Signed-off-by: default avatarPin-yen Lin <treapking@chromium.org>
Acked-by: default avatarBrian Norris <briannorris@chromium.org>
Reviewed-by: default avatarMatthew Wang <matthewmwang@chromium.org>
Signed-off-by: default avatarKalle Valo <kvalo@kernel.org>
Link: https://lore.kernel.org/r/20230908104308.1546501-1-treapking@chromium.org


Signed-off-by: default avatarSasha Levin <sashal@kernel.org>
Signed-off-by: default avatarYongqiang Liu <liuyongqiang13@huawei.com>
parent 70c98c7d
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment