aboutsummaryrefslogtreecommitdiffstats
path: root/net/switchdev/switchdev.c
diff options
context:
space:
mode:
authorKees Cook <[email protected]>2021-06-16 19:54:10 +0000
committerKalle Valo <[email protected]>2021-06-22 15:28:00 +0000
commitc8bcd82a4efd053cdd5ce515a8b0003011a5f756 (patch)
tree4fce0eb4a4ec04487e6c8f5fa4c36a2fb019fd88 /net/switchdev/switchdev.c
parentath11k: Enable QCN9074 device (diff)
downloadkernel-c8bcd82a4efd053cdd5ce515a8b0003011a5f756.tar.gz
kernel-c8bcd82a4efd053cdd5ce515a8b0003011a5f756.zip
ath11k: Avoid memcpy() over-reading of he_cap
In preparation for FORTIFY_SOURCE performing compile-time and run-time field bounds checking for memcpy(), memmove(), and memset(), avoid intentionally writing across neighboring array fields. Since peer_he_cap_{mac,phy}info and he_cap_elem.{mac,phy}_cap_info are not the same sizes, memcpy() was reading beyond field boundaries. Instead, correctly cap the copy length and pad out any difference in size (peer_he_cap_macinfo is 8 bytes whereas mac_cap_info is 6, and peer_he_cap_phyinfo is 12 bytes whereas phy_cap_info is 11). Signed-off-by: Kees Cook <[email protected]> Signed-off-by: Kalle Valo <[email protected]> Link: https://lore.kernel.org/r/[email protected]
Diffstat (limited to 'net/switchdev/switchdev.c')
0 files changed, 0 insertions, 0 deletions