iwlwifi: fw: harden page loading code
authorLuca Coelho <luciano.coelho@intel.com>
Tue, 13 Feb 2018 09:09:40 +0000 (11:09 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 25 Jun 2018 23:51:31 +0000 (07:51 +0800)
commit1d79bd39cd5bc975ebe9190ac75dd9285069a33d
treedc138eb8474de5fa36485dc3f7af0cc19804c602
parentb72cee00bc77e8cf07dcaa14e751b813342fe3f5
iwlwifi: fw: harden page loading code

commit 9039d985811d5b109b58b202b7594fd24e433fed upstream.

The page loading code trusts the data provided in the firmware images
a bit too much and may cause a buffer overflow or copy unknown data if
the block sizes don't match what we expect.

To prevent potential problems, harden the code by checking if the
sizes we are copying are what we expect.

Cc: stable@vger.kernel.org
Signed-off-by: Luca Coelho <luciano.coelho@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/net/wireless/intel/iwlwifi/fw/paging.c