[iwm] Fix off-by-one check in iwm_read_firmware().
ClosedPublic
Actions

Authored by ivadasz on Sep 18 2016, 9:26 AM.

Tags

None

Referenced Files

	Unknown Object (File)
	Sun, Nov 10, 8:21 PM

	Unknown Object (File)
	Oct 25 2024, 9:31 AM

	Unknown Object (File)
	Oct 22 2024, 7:14 AM

	Unknown Object (File)
	Oct 9 2024, 12:36 AM

	Unknown Object (File)
	Oct 5 2024, 4:50 AM

	Unknown Object (File)
	Oct 4 2024, 4:51 PM

	Unknown Object (File)
	Oct 4 2024, 1:26 PM

	Unknown Object (File)
	Oct 4 2024, 2:00 AM

View All 85 Files

Subscribers

imp

Details

Reviewers

cognet
adrian

Commits

rS306001: [iwm] Fix off-by-one check in iwm_read_firmware().

Summary

This fixes a potential buffer overrun in the firmware parsing code.

Reported by: Coverity

Diff Detail

Repository

rS FreeBSD src repository - subversion

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

ivadasz updated this revision to Diff 20434.Sep 18 2016, 9:26 AM

ivadasz retitled this revision from to [iwm] Fix off-by-one check in iwm_read_firmware()..

ivadasz updated this object.

ivadasz added reviewers: adrian, cognet.

Herald added a subscriber: imp. · View Herald TranscriptSep 18 2016, 9:26 AM

adrian accepted this revision.Sep 19 2016, 9:36 PM

adrian edited edge metadata.

This revision is now accepted and ready to land.Sep 19 2016, 9:36 PM

Closed by commit rS306001: [iwm] Fix off-by-one check in iwm_read_firmware(). (authored by ivadasz). · Explain WhySep 19 2016, 10:11 PM

This revision was automatically updated to reflect the committed changes.

Revision Contents
Changeset List

Path

Size

head/

sys/

dev/

iwm/

if_iwm.c

2 lines

Diff 20501

View Options

[iwm] Fix off-by-one check in iwm_read_firmware().ClosedPublicActions