commit 3fffc78f70dc101add8b82af878d53457713d005
Author: Patrick Tjin <[email protected]>
Date:   Wed Dec 9 15:24:05 2015 -0800

    net: wireless: bcmdhd: check packet length for event messages

    Check the datalen field is less than the size of
    packet received from the network.

    Bug: 25306181

    Signed-off-by: Patrick Tjin <[email protected]>
    Change-Id: I3b021d88a95bd7d4e6e0d745d2527d73487bcadc
    (cherry picked from commit 10b850b7e82873a14068d24dac4fc2080d46ff76)

commit 68cdc8df1cb6622980b791ce03e99c255c9888af
Author: dataanddreams <[email protected]>
Date:   Mon Nov 30 17:08:54 2015 -0500

    bcmdhd: Add checks for stack buffer overflows

    These two checks prevent exploitable buffer overflows in two scenarios.
    1. Long WPS_ID_DEVICE_NAME in WPS info elements
    2. Invalid SSID determined in certain scan results

    Bug: 25662233
    Change-Id: Ifb2887737aa6218079745f27d59b5f1364b3892e