Kernel/iwd
3
0
Fork 0
mirror of https://git.kernel.org/pub/scm/network/wireless/iwd.git synced 2025-08-20 18:57:26 +02:00
Code Releases Activity

erp: Avoid potential overflow

Browse Source 
When checking that the length is valid, avoid potentially overflowing
'start + len'
This commit is contained in:
Denis Kenzior 2022-01-14 09:48:48 -06:00
parent 5e9178b9de
commit 938e056896
1 changed files with 1 additions and 1 deletions

2
src/erp.c

@ -131,7 +131,7 @@ static bool erp_tlv_iter_next(struct erp_tlv_iter *iter)
else
len = 4;
if (tlv + len > end)
if (len > end - tlv)
return false;
iter->tag = tag;