summaryrefslogtreecommitdiffstats
path: root/net/wireless/nl80211.c
diff options
context:
space:
mode:
authorDan Carpenter <dan.carpenter@oracle.com>2011-09-26 09:30:40 +0300
committerJohn W. Linville <linville@tuxdriver.com>2011-09-27 14:36:04 -0400
commit2fb40577b05a869904a8fcf7098d26f3c7809644 (patch)
tree8d580ce6b1814c8a0d1f66f1fd12b618d917cab6 /net/wireless/nl80211.c
parentf6f3def323e5d60cc2a5659533dce547c0aac5fc (diff)
downloadlinux-2fb40577b05a869904a8fcf7098d26f3c7809644.tar.bz2
wl3501_cs: min_t() cast truncates high bits
wrqu->encoding.length comes from the network administrator. It's size u16. We want to limit "tocopy" to the smallest value of either "len_keys", "wrqu->encoding.length" or 100. But because .length gets cast from u16 to u8 we might use a random, smaller value than the was desired. It's probably not very serious, but we may as well fix it. Btw, this is from code auditing and not from testing. I don't know if this affects anyone in real life. Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: John W. Linville <linville@tuxdriver.com>
Diffstat (limited to 'net/wireless/nl80211.c')
0 files changed, 0 insertions, 0 deletions