Dan Carpenter e668dd8e47 staging: wlags49_h2: buffer overflow setting station name ...

commit b5e2f33986 upstream.

We need to check the length parameter before doing the memcpy().  I've
actually changed it to strlcpy() as well so that it's NUL terminated.

You need CAP_NET_ADMIN to trigger these so it's not the end of the
world.

Reported-by: Nico Golde <nico@ngolde.de>
Reported-by: Fabian Yamaguchi <fabs@goesec.de>
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2013-11-13 12:05:33 +09:00

..

android

staging: android: logger: Correct write offset reset on error

2013-08-04 16:50:51 +08:00

asus_oled

…

bcm

Staging: bcm: info leak in ioctl

2013-11-13 12:05:33 +09:00

ced1401

…

comedi

staging: comedi: ni_65xx: (bug fix) confine insn_bits to one subdevice

2013-10-13 16:08:33 -07:00

cptm1217

…

crystalhd

…

csr

staging: single_open() leaks

2013-05-05 00:15:43 -04:00

cxt1e1

staging: single_open() leaks

2013-05-05 00:15:43 -04:00

dgrp

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2013-05-01 17:51:54 -07:00

dwc2

staging: dwc2: fix value of dma_mask

2013-05-30 21:14:30 +09:00

echo

…

et131x

…

frontier

…

ft1000

staging: single_open() leaks

2013-05-05 00:15:43 -04:00

fwserial

Merge tag 'tty-3.10-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty

2013-04-29 12:16:17 -07:00

gdm72xx

USB: remove remaining instances of USB_SUSPEND

2013-05-15 13:44:44 -04:00

goldfish

…

iio

iio: mxs-lradc: Remove useless check in read_raw

2013-09-26 17:18:05 -07:00

imx-drm

imx-drm: imx-drm-core: Export imx_drm_encoder_get_mux_id

2013-09-07 22:10:00 -07:00

keucr

…

line6

staging: line6: Fix unlocked snd_pcm_stop() call

2013-07-25 14:07:42 -07:00

media

Merge branch 'v4l_for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media

2013-06-18 06:25:08 -10:00

netlogic

…

nvec

Merge tag 'staging-3.10-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging

2013-05-23 09:27:49 -07:00

octeon

…

olpc_dcon

…

ozwpan

staging: ozwpan: prevent overflow in oz_cdev_write()

2013-11-13 12:05:32 +09:00

panel

…

phison

…

quickstart

…

rtl8187se

staging: single_open() leaks

2013-05-05 00:15:43 -04:00

rtl8192e

hostap: Don't use create_proc_read_entry()

2013-04-29 15:41:56 -04:00

rtl8192u

staging: single_open() leaks

2013-05-05 00:15:43 -04:00

rtl8712

…

rts5139

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2013-05-01 17:51:54 -07:00

sb105x

Staging: sb105x: info leak in mp_get_count()

2013-11-13 12:05:33 +09:00

sbe-2t3e3

…

sep

staging: sep: fix driver build and kconfig

2013-05-16 15:37:49 -07:00

serqt_usb2

…

silicom

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2013-05-01 17:51:54 -07:00

slicoss

…

sm7xxfb

…

speakup

staging: speakup: remove custom string_unescape_any_inplace

2013-04-30 17:04:03 -07:00

ste_rmi4

staging: ste_rmi4: Suppress 'ignoring return value of ‘regulator_enable()' warning

2013-05-16 15:37:49 -07:00

ti-soc-thermal

…

tidspbridge

…

usbip

…

vme

…

vt6655

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2013-05-01 17:51:54 -07:00

vt6656

staging: vt6656: [BUG] iwctl_siwencodeext return if device not open

2013-10-05 07:13:10 -07:00

winbond

…

wlags49_h2

staging: wlags49_h2: buffer overflow setting station name

2013-11-13 12:05:33 +09:00

wlags49_h25

…

wlan-ng

…

xgifb

…

zcache

staging: zcache: fix "zcache=" kernel parameter

2013-08-14 22:59:06 -07:00

zram

zram: allow request end to coincide with disksize

2013-08-14 22:59:09 -07:00

zsmalloc

staging/zsmalloc: don't use pgtable-mapping from modules

2013-04-23 10:34:20 -07:00

Kconfig

staging: Swap zram and zsmalloc in Kconfig

2013-05-16 15:38:58 -07:00

Makefile

staging: net: remove pc300 driver

2013-04-19 11:15:20 -07:00

staging.c

…