Re: [PATCH 3/3] brcmfmac: Add check for short event packets

2017-09-12 Thread Arend van Spriel
On 12-09-17 17:04, Kevin Cernekee wrote: On Mon, Sep 11, 2017 at 12:09 PM, Arend van Spriel wrote: diff --git a/drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c b/drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c index 5aabdc9ed7e0..4cad1f0d2a82

Re: [PATCH 3/3] brcmfmac: Add check for short event packets

2017-09-12 Thread Kevin Cernekee
On Mon, Sep 11, 2017 at 12:09 PM, Arend van Spriel wrote: >>> diff --git a/drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c >>> b/drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c >>> index 5aabdc9ed7e0..4cad1f0d2a82 100644 >>> ---

Re: [PATCH 3/3] brcmfmac: Add check for short event packets

2017-09-11 Thread Arend van Spriel
On 11-09-17 11:19, Mattias Nissler wrote: On Fri, Sep 8, 2017 at 9:13 PM, Kevin Cernekee wrote: The length of the data in the received skb is currently passed into brcmf_fweh_process_event() as packet_len, but this value is not checked. event_packet should be followed

Re: [PATCH 3/3] brcmfmac: Add check for short event packets

2017-09-11 Thread Mattias Nissler
On Fri, Sep 8, 2017 at 9:13 PM, Kevin Cernekee wrote: > > The length of the data in the received skb is currently passed into > brcmf_fweh_process_event() as packet_len, but this value is not checked. > event_packet should be followed by DATALEN bytes of additional event >

Re: [PATCH 3/3] brcmfmac: Add check for short event packets

2017-09-09 Thread Arend van Spriel
On 08-09-17 21:13, Kevin Cernekee wrote: The length of the data in the received skb is currently passed into brcmf_fweh_process_event() as packet_len, but this value is not checked. event_packet should be followed by DATALEN bytes of additional event data. Ensure that the received packet