linux/drivers/net/wireless/intel
Shahar S Matityahu 21587a9b0a iwlwifi: dbg: buffer overflow in non_collect_ts_start array
The size of the buffer is IWL_FW_TRIGGER_ID_NUM - 1 which is equal to
IWL_FW_TRIGGER_ID_HOST_CHANNEL_SWITCH_COMPLETE so if the driver receives
this trigger, it will cause a buffer overflow.

Solve this by increasing the buffer size by 1.

Signed-off-by: Shahar S Matityahu <shahar.s.matityahu@intel.com>
Fixes: fe1b7d6c28 ("iwlwifi: add support for triggering ini triggers")
Signed-off-by: Luca Coelho <luciano.coelho@intel.com>
2019-02-14 11:29:51 +02:00
..
ipw2x00 wireless-drivers-next patches for 4.21 2018-12-20 16:47:10 -08:00
iwlegacy iwlegacy: no need to check return value of debugfs_create functions 2019-02-01 14:28:59 +02:00
iwlwifi iwlwifi: dbg: buffer overflow in non_collect_ts_start array 2019-02-14 11:29:51 +02:00
Kconfig net/wireless: fix spaces and grammar copy/paste in vendor Kconfig help text 2018-03-13 18:52:25 +02:00
Makefile