KSPP / linux

Linux kernel source tree (Kernel Self Protection Project)
https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project
Other
80 stars 5 forks source link

Replace one-element array with flex-array member in drivers/net/wireless/marvell/mwifiex/fw.h #252

Closed GustavoARSilva closed 1 year ago

GustavoARSilva commented 1 year ago

drivers/net/wireless/marvell/mwifiex/fw.h:

 795 struct mwifiex_ie_types_rates_param_set {
 796         struct mwifiex_ie_types_header header;
 797         u8 rates[1];
 798 } __packed;

Also, worth noting is that this fake flex-array is currently being used as argument in calls to memcpy():

drivers/net/wireless/marvell/mwifiex/join.c
memcpy(rates_tlv->rates, rates, rates_size);
drivers/net/wireless/marvell/mwifiex/scan.c:
memcpy(rates_tlv->rates, rates, rates_size);
GustavoARSilva commented 1 year ago

In mainline now.