Kernel/iwd
3
0
Fork 0
mirror of https://git.kernel.org/pub/scm/network/wireless/iwd.git synced 2025-05-02 05:57:26 +02:00
Code Releases Activity

erp: Avoid potential overflow

Browse Source 
When checking that the length is valid, avoid potentially overflowing
'start + len'
This commit is contained in:
Denis Kenzior 2022-01-14 09:48:48 -06:00
parent 5e9178b9de
commit 938e056896
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/erp.c
View File

@ -131,7 +131,7 @@ static bool erp_tlv_iter_next(struct erp_tlv_iter *iter)
else else
len = 4; len = 4;
if (tlv + len > end) if (len > end - tlv)
return false; return false;
iter->tag = tag; iter->tag = tag;