Subject: Re: [PATCH] qtnfmac: Fix possible buffer overflow in qtnf_event_handle_external_auth

From: Kalle Valo <[email-masked]>
Date: Sat, 17 Apr 2021 17:24:16 +0000 (UTC)

Lee Gibson <[email-masked]> wrote:

> Function qtnf_event_handle_external_auth calls memcpy without
> checking the length.
> A user could control that length and trigger a buffer overflow.
> Fix by checking the length is within the maximum allowed size.
> 
> Signed-off-by: Lee Gibson <[email-masked]>

Please use clamp_val() instead, that's preferred over min_t().

Patch set to Changes Requested.

-- 
https://patchwork.kernel.org/project/linux-wireless/patch/[email-masked]/

https://wireless.wiki.kernel.org/en/developers/documentation/submittingpatches