From: Jussi Kivilinna <jussi.kivilinna@mbnet.fi>
Date: Sun, 22 Nov 2009 18:16:42 +0000 (+0200)
Subject: rndis_wlan: fix buffer overflow in rndis_query_oid
X-Git-Tag: v2.6.33-rc1~388^2~214^2~4
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c1f8ca1d837148bf061d6ffa2038366e3cf0e4d7;p=pandora-kernel.git

rndis_wlan: fix buffer overflow in rndis_query_oid

rndis_query_oid overwrites *len which stores buffer size to return full size
of received command and then uses *len with memcpy to fill buffer with
command.

Ofcourse memcpy should be done before replacing buffer size.

Signed-off-by: Jussi Kivilinna <jussi.kivilinna@mbnet.fi>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
---

Reading git-diff-tree failed