brcmfmac: add length checks in scheduled scan result handler
authorArend Van Spriel <arend.vanspriel@broadcom.com>
Thu, 6 Apr 2017 12:14:40 +0000 (13:14 +0100)
committerKalle Valo <kvalo@codeaurora.org>
Thu, 13 Apr 2017 14:07:22 +0000 (17:07 +0300)
commit4835f37e3bafc138f8bfa3cbed2920dd56fed283
tree8f4d7cfa031d10402f638f6688c2a0fef57380dd
parentacf8ac41dd733508b9e77483f96e53610c87fa64
brcmfmac: add length checks in scheduled scan result handler

Assure the event data buffer is long enough to hold the array
of netinfo items and that SSID length does not exceed the maximum
of 32 characters as per 802.11 spec.

Reviewed-by: Hante Meuleman <hante.meuleman@broadcom.com>
Reviewed-by: Pieter-Paul Giesberts <pieter-paul.giesberts@broadcom.com>
Reviewed-by: Franky Lin <franky.lin@broadcom.com>
Signed-off-by: Arend van Spriel <arend.vanspriel@broadcom.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c