From: Dan Carpenter Date: Mon, 7 Apr 2014 06:31:21 +0000 (+0300) Subject: Staging: rtl8188eu: overflow in update_sta_support_rate() X-Git-Tag: omap-for-v3.16/fixes-against-rc1~39^2~36^2~1268 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=9dbd79aeb9842144d9a114a979a12c0949ee11eb;p=pandora-kernel.git Staging: rtl8188eu: overflow in update_sta_support_rate() The ->SupportedRates[] array has NDIS_802_11_LENGTH_RATES_EX (16) elements. Since "ie_len" comes from then network and can go up to 255 then it means we should add a range check to prevent memory corruption. Fixes: d6846af679e0 ('staging: r8188eu: Add files for new driver - part 7') Signed-off-by: Dan Carpenter Signed-off-by: Greg Kroah-Hartman --- Reading git-diff-tree failed