]> git.karo-electronics.de Git - karo-tx-linux.git/commit
mac80211: check management frame header length
authorJohannes Berg <johannes.berg@intel.com>
Thu, 25 Oct 2012 22:33:36 +0000 (00:33 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 17 Nov 2012 21:16:08 +0000 (13:16 -0800)
commit537d86c490a03bcb56dfa24c0327c18e61b1ced5
tree5d6aa73453746c3439923c64e90dc4b7c2ef60aa
parent4b51c17efde8501badb4bf7355172eb262407ad8
mac80211: check management frame header length

commit 4a4f1a5808c8bb0b72a4f6e5904c53fb8c9cd966 upstream.

Due to pskb_may_pull() checking the skb length, all
non-management frames are checked on input whether
their 802.11 header is fully present. Also add that
check for management frames and remove a check that
is now duplicate. This prevents accessing skb data
beyond the frame end.

Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/mac80211/rx.c