cfg80211: regulatory: reject invalid hints

commit 47caf68 upstream. Reject invalid hints early in order to not cause a kernel WARN later if they're restored to or similar. Reported-by: [email protected] Link: https://syzkaller.appspot.com/bug?extid=d451401ffd00a60677ee Link: https://lore.kernel.org/r/[email protected] Signed-off-by: Johannes Berg <[email protected]> Signed-off-by: Greg Kroah-Hartman <[email protected]>
crdroidandroid · Sep 9, 2020 · 02015d2 · 02015d2
1 parent c4b2191
commit 02015d2
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/net/wireless/reg.c b/net/wireless/reg.c
@@ -2408,6 +2408,9 @@ int regulatory_hint_user(const char *alpha2,
 	if (WARN_ON(!alpha2))
 		return -EINVAL;
 
+	if (!is_world_regdom(alpha2) && !is_an_alpha2(alpha2))
+		return -EINVAL;
+
 	request = kzalloc(sizeof(struct regulatory_request), GFP_KERNEL);
 	if (!request)
 		return -ENOMEM;