summaryrefslogtreecommitdiff
path: root/crypto
diff options
context:
space:
mode:
authorKevin Cernekee <cernekee@chromium.org>2017-09-16 21:08:22 -0700
committerKalle Valo <kvalo@codeaurora.org>2017-10-02 17:07:00 +0300
commit73f2c8e933b1dcf432ac8c6965a6e67af630077f (patch)
tree7d13c96d617eaf3578ebb02ac0a48749a6313df2 /crypto
parent96cbe3d638e4287db6482b6223367d3e6cf5871e (diff)
brcmfmac: Avoid possible out-of-bounds read
In brcmf_p2p_notify_rx_mgmt_p2p_probereq(), chanspec is assigned before the length of rxframe is validated. This could lead to uninitialized data being accessed (but not printed). Since we already have a perfectly good endian-swapped copy of rxframe->chanspec in ch.chspec, and ch.chspec is not modified by decchspec(), avoid the extra assignment and use ch.chspec in the debug print. Suggested-by: Mattias Nissler <mnissler@chromium.org> Signed-off-by: Kevin Cernekee <cernekee@chromium.org> Reviewed-by: Arend van Spriel <arend.vanspriel@broadcom.com> Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Diffstat (limited to 'crypto')
0 files changed, 0 insertions, 0 deletions