Arend Van Spriel 17df6453d4 brcmfmac: add length check in brcmf_cfg80211_escan_handler() ... Upon handling the firmware notification for scans the length was checked properly and may result in corrupting kernel heap memory due to buffer overruns. This fix addresses CVE-2017-0786. Cc: stable@vger.kernel.org # v4.0.x Cc: Kevin Cernekee <cernekee@chromium.org> Reviewed-by: Hante Meuleman <hante.meuleman@broadcom.com> Reviewed-by: Pieter-Paul Giesberts <pieter-paul.giesberts@broadcom.com> Reviewed-by: Franky Lin <franky.lin@broadcom.com> Signed-off-by: Arend van Spriel <arend.vanspriel@broadcom.com> Signed-off-by: Kalle Valo <kvalo@codeaurora.org>		2017-09-20 07:46:29 +03:00
..
b43	b43: Add missing MODULE_FIRMWARE()	2017-05-22 12:02:46 +03:00
b43legacy	networking: introduce and use skb_put_data()	2017-06-16 11:48:37 -04:00
brcm80211	brcmfmac: add length check in brcmf_cfg80211_escan_handler()	2017-09-20 07:46:29 +03:00
Kconfig
Makefile