Dan Carpenter 3348ef6a6a libertas_tf: prevent underflow in process_cmdrequest() ...

If recvlength is less than MESSAGE_HEADER_LEN (4) we would end up
corrupting memory.

Fixes: c305a19a0d ("libertas_tf: usb specific functions")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>

2018-08-31 18:43:36 +03:00

..

cmd.c

libertas_tf: move under marvell vendor directory

2015-11-18 14:28:30 +02:00

deb_defs.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

if_usb.c

libertas_tf: prevent underflow in process_cmdrequest()

2018-08-31 18:43:36 +03:00

if_usb.h

libertas_tf: move under marvell vendor directory

2015-11-18 14:28:30 +02:00

Kconfig

libertas_tf: move under marvell vendor directory

2015-11-18 14:28:30 +02:00

libertas_tf.h

libertas_tf: move under marvell vendor directory

2015-11-18 14:28:30 +02:00

main.c

libertas: Convert timers to use timer_setup()

2017-10-27 10:48:44 +03:00

Makefile

libertas_tf: move under marvell vendor directory

2015-11-18 14:28:30 +02:00