Re: [PATCH] mwifiex: printk() overflow with 32-byte SSIDs

2 messages, 2 authors, 2016-11-09 · open the first message on its own page

Re: [PATCH] mwifiex: printk() overflow with 32-byte SSIDs

From: Kalle Valo <hidden>
Date: 2016-11-09 22:21:01

Brian Norris [off-list ref] writes:
SSIDs aren't guaranteed to be 0-terminated. Let's cap the max length
when we print them out.

This can be easily noticed by connecting to a network with a 32-octet
SSID:

[ 3903.502925] mwifiex_pcie 0000:01:00.0: info: trying to associate to
'0123456789abcdef0123456789abcdef <uninitialized mem>' bssid
xx:xx:xx:xx:xx:xx

Fixes: 5e6e3a92b9a4 ("wireless: mwifiex: initial commit for Marvell mwifiex driver")
Signed-off-by: Brian Norris <briannorris@chromium.org>
Cc: <redacted>
I'm planning to push this to 4.9 if no objections.

-- 
Kalle Valo

Re: [PATCH] mwifiex: printk() overflow with 32-byte SSIDs

From: Brian Norris <briannorris@chromium.org>
Date: 2016-11-09 22:22:23

On Thu, Nov 10, 2016 at 12:20:53AM +0200, Kalle Valo wrote:
Brian Norris [off-list ref] writes:
quoted
SSIDs aren't guaranteed to be 0-terminated. Let's cap the max length
when we print them out.

This can be easily noticed by connecting to a network with a 32-octet
SSID:

[ 3903.502925] mwifiex_pcie 0000:01:00.0: info: trying to associate to
'0123456789abcdef0123456789abcdef <uninitialized mem>' bssid
xx:xx:xx:xx:xx:xx

Fixes: 5e6e3a92b9a4 ("wireless: mwifiex: initial commit for Marvell mwifiex driver")
Signed-off-by: Brian Norris <briannorris@chromium.org>
Cc: <redacted>
I'm planning to push this to 4.9 if no objections.
SGTM. Thanks.
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help