[PATCH 0/2] libertas: fix rates overflow code path in lbs_ibss_join_existing()

From: Nicolai Stange
Date: Tue Jan 14 2020 - 05:39:49 EST


Hi,

these two patches here attempt to cleanup two related issues ([1])
introduced with commit e5e884b42639 ("libertas: Fix two buffer overflows
at parsing bss descriptor"), currently queued at the wireless-drivers
tree.

Feel free to squash this into one commit.

I don't own the hardware and did some compile-testing on x86_64 only.

Thanks,

Nicolai

[1] https://lkml.kernel.org/r/87woa04t2v.fsf@xxxxxxx


Nicolai Stange (2):
libertas: don't exit from lbs_ibss_join_existing() with RCU read lock
held
libertas: make lbs_ibss_join_existing() return error code on rates
overflow

drivers/net/wireless/marvell/libertas/cfg.c | 2 ++
1 file changed, 2 insertions(+)

--
2.16.4