[Bug 254479] Kernel remote heap overflow in Realtek RTL8188SU/RTL8191SU/RTL8192SU Wifi Cards USB driver

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Mon Mar 22 14:51:37 UTC 2021


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=254479

--- Comment #1 from Mark Johnston <markj at FreeBSD.org> ---
Was this analysis based on a crash you hit, or the output of some static
analysis?  It is copying the mbuf contents into a buffer of size RSU_TXBUFSZ,
not of size sizeof(struct r92s_tx_desc).

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-wireless mailing list