tree a73f93c926908d7dc83389db16a2716c1a541af7
parent b24ed15b1ec4331ec8f32edf1a8124a19de25a17
author Patrick Tjin <pattjin@google.com> 1449724676 -0800
committer Kees Cook <keescook@google.com> 1457635017 -0800

net: wireless: bcmdhd: check packet length for event messages

Check the datalen field is less than the size of
packet received from the network.

Signed-off-by: Patrick Tjin <pattjin@google.com>

Bug: 27335472

[fixes CVE-2016-0802]
Signed-off-by: Kees Cook <keescook@chromium.org>
Change-Id: I4fdbbe5218c1d34f928069237382c7f9ecb3b25f