Arend Van Spriel 17df6453d4 brcmfmac: add length check in brcmf_cfg80211_escan_handler() ... Upon handling the firmware notification for scans the length was checked properly and may result in corrupting kernel heap memory due to buffer overruns. This fix addresses CVE-2017-0786. Cc: stable@vger.kernel.org # v4.0.x Cc: Kevin Cernekee <cernekee@chromium.org> Reviewed-by: Hante Meuleman <hante.meuleman@broadcom.com> Reviewed-by: Pieter-Paul Giesberts <pieter-paul.giesberts@broadcom.com> Reviewed-by: Franky Lin <franky.lin@broadcom.com> Signed-off-by: Arend van Spriel <arend.vanspriel@broadcom.com> Signed-off-by: Kalle Valo <kvalo@codeaurora.org>		2017-09-20 07:46:29 +03:00
..
brcmfmac	brcmfmac: add length check in brcmf_cfg80211_escan_handler()	2017-09-20 07:46:29 +03:00
brcmsmac	mac80211: separate encoding/bandwidth from flags	2017-04-28 10:41:45 +02:00
brcmutil	brcmutil: add field storing control channel to the struct brcmu_chan	2016-06-14 17:27:42 +03:00
include	brcmfmac: Add support for CYW4373 SDIO/USB chipset	2017-08-08 14:51:12 +03:00
Kconfig	brcmfmac: update BRCMFMAC symbol description	2017-04-05 15:34:33 +03:00
Makefile