]> git.karo-electronics.de Git - karo-tx-linux.git/commit
mac80211: check management frame header length
authorJohannes Berg <johannes.berg@intel.com>
Thu, 25 Oct 2012 22:33:36 +0000 (00:33 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 17 Nov 2012 21:14:21 +0000 (13:14 -0800)
commit03938ad82dcc45ecc5695ed14f7869b06b233b8d
treeb645b8d36b6d36180115e2dfb941644207184704
parent2dda2bb41abe27bdfab30234d56320339a411b3d
mac80211: check management frame header length

commit 4a4f1a5808c8bb0b72a4f6e5904c53fb8c9cd966 upstream.

Due to pskb_may_pull() checking the skb length, all
non-management frames are checked on input whether
their 802.11 header is fully present. Also add that
check for management frames and remove a check that
is now duplicate. This prevents accessing skb data
beyond the frame end.

Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/mac80211/rx.c