Emmanuel Grumbach 99a23462fe wifi: iwlwifi: fix a memory corruption ...

commit cf4a0d840e upstream.

iwl_fw_ini_trigger_tlv::data is a pointer to a __le32, which means that
if we copy to iwl_fw_ini_trigger_tlv::data + offset while offset is in
bytes, we'll write past the buffer.

Cc: stable@vger.kernel.org
Closes: https://bugzilla.kernel.org/show_bug.cgi?id=218233
Fixes: cf29c5b66b ("iwlwifi: dbg_ini: implement time point handling")
Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
Signed-off-by: Miri Korenblit <miriam.rachel.korenblit@intel.com>
Link: https://msgid.link/20240111150610.2d2b8b870194.I14ed76505a5cf87304e0c9cc05cc0ae85ed3bf91@changeid
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2024-02-23 08:54:31 +01:00

..

ipw2x00

wifi: ipw2200: fix memory leak in ipw_wdev_init()

2023-03-10 09:39:07 +01:00

iwlegacy

wifi: iwl4965: Add missing check for create_singlethread_workqueue()

2023-03-10 09:39:17 +01:00

iwlwifi

wifi: iwlwifi: fix a memory corruption

2024-02-23 08:54:31 +01:00

Kconfig

…

Makefile

…