staging: ath6kl: buffer overflow in SEND_FRAME ioctl
authorDan Carpenter <error27@gmail.com>
Sun, 20 Feb 2011 12:49:53 +0000 (15:49 +0300)
committerGreg Kroah-Hartman <gregkh@suse.de>
Wed, 23 Feb 2011 22:00:13 +0000 (14:00 -0800)
commit5b6567ee84d6e8f7015eaa7d7c4926b4fd81746e
tree92c7ee327f13151e4534e7a68aba02be59ed2612
parent253804a25b45aad7bf4f63483f7c7b1d14ab49e2
staging: ath6kl: buffer overflow in SEND_FRAME ioctl

We should check that optTxFrmCmd.optIEDataLen isn't too large before we
copy it into the data buffer.

Signed-off-by: Dan Carpenter <error27@gmail.com>
Acked-by: Vipin Mehta <vipin.mehta@atheros.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
drivers/staging/ath6kl/os/linux/ioctl.c