[SRU E/D/B/X 0/3] Multiple buffer overflows in Marvell driver

[Andrea Righi]

On Tue, Nov 26, 2019 at 09:39:11AM +0100, Stefan Bader wrote:
> Multiple buffer overflows have been found and fixed in the Marvell
> wireless driver. For Xenial the main change is that the Marvell driver
> has not yet its own subdirectory. So all paths had to be adjusted.
> 
> -Stefan
> 
> Wen Huang (2):
>   mwifiex: fix possible heap overflow in mwifiex_process_country_ie()
>   libertas: Fix two buffer overflows at parsing bss descriptor
> 
> wangqize (1):
>   mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame()
> 
>  drivers/net/wireless/marvell/libertas/cfg.c   |  8 +++
>  .../net/wireless/marvell/mwifiex/sta_ioctl.c  |  3 +-
>  drivers/net/wireless/marvell/mwifiex/tdls.c   | 70 +++++++++++++++++--
>  3 files changed, 74 insertions(+), 7 deletions(-)
> 

All the fixes make sense to me.

Acked-by: Andrea Righi <andrea.righi at canonical.com>