On 12-09-17 17:04, Kevin Cernekee wrote:
On Mon, Sep 11, 2017 at 12:09 PM, Arend van Spriel
wrote:
diff --git a/drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c
b/drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c
index 5aabdc9ed7e0..4cad1f0d2a82
On Mon, Sep 11, 2017 at 12:09 PM, Arend van Spriel
wrote:
>>> diff --git a/drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c
>>> b/drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c
>>> index 5aabdc9ed7e0..4cad1f0d2a82 100644
>>> ---
On 11-09-17 11:19, Mattias Nissler wrote:
On Fri, Sep 8, 2017 at 9:13 PM, Kevin Cernekee wrote:
The length of the data in the received skb is currently passed into
brcmf_fweh_process_event() as packet_len, but this value is not checked.
event_packet should be followed
On Fri, Sep 8, 2017 at 9:13 PM, Kevin Cernekee wrote:
>
> The length of the data in the received skb is currently passed into
> brcmf_fweh_process_event() as packet_len, but this value is not checked.
> event_packet should be followed by DATALEN bytes of additional event
>
On 08-09-17 21:13, Kevin Cernekee wrote:
The length of the data in the received skb is currently passed into
brcmf_fweh_process_event() as packet_len, but this value is not checked.
event_packet should be followed by DATALEN bytes of additional event
data. Ensure that the received packet