[v2] staging: rtl8723bs: fix OOB write in HT_caps_handler and OOB read in OnAssocRsp

[PATCH v2 0/2] staging: rtl8723bs: fix OOB write in HT_caps_handler and OOB read in OnAssocRsp

Alexandru Hossu posted 2 patches 1 month, 2 weeks ago

Diff against v3
Download series mbox

There is a newer version of this series

drivers/staging/rtl8723bs/core/rtw_mlme_ext.c  | 4 ++++
drivers/staging/rtl8723bs/core/rtw_wlan_util.c | 3 ++-
2 files changed, 6 insertions(+), 1 deletion(-)

Expand all Fold all

[PATCH v2 0/2] staging: rtl8723bs: fix OOB write in HT_caps_handler and OOB read in OnAssocRsp

Posted by Alexandru Hossu 1 month, 2 weeks ago

v2, addressing Greg's feedback on 1/2. Greg, please drop your patch
and take this one instead.

Changes from v1:
 - 1/2: switch from early return to min_t() truncation, so APs that
   send an oversized HT Caps element are handled gracefully rather
   than rejected outright (Greg KH)

2/2 is unchanged from v1.

Alexandru Hossu (2):
  staging: rtl8723bs: fix OOB write in HT_caps_handler()
  staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop

 drivers/staging/rtl8723bs/core/rtw_mlme_ext.c  | 4 ++++
 drivers/staging/rtl8723bs/core/rtw_wlan_util.c | 3 ++-
 2 files changed, 6 insertions(+), 1 deletion(-)

-- 
2.53.0