]> git.kernelconcepts.de Git - karo-tx-linux.git/commit
mac80211: check management frame header length
authorJohannes Berg <johannes.berg@intel.com>
Thu, 25 Oct 2012 22:33:36 +0000 (00:33 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 17 Nov 2012 21:18:31 +0000 (13:18 -0800)
commit1d45cb149a2ad467d5454a01ec60bff38b0ddfe4
treea71c4b9a38f021039612c9133175f2d933c96e17
parentec17483485122fbae70bb40d77aa1f0cf1916df2
mac80211: check management frame header length

commit 4a4f1a5808c8bb0b72a4f6e5904c53fb8c9cd966 upstream.

Due to pskb_may_pull() checking the skb length, all
non-management frames are checked on input whether
their 802.11 header is fully present. Also add that
check for management frames and remove a check that
is now duplicate. This prevents accessing skb data
beyond the frame end.

Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/mac80211/rx.c