]> git.baikalelectronics.ru Git - kernel.git/commit
mac80211: add length check in ieee80211_is_robust_mgmt_frame()
authorJohannes Berg <johannes.berg@intel.com>
Thu, 23 Jan 2014 15:20:29 +0000 (16:20 +0100)
committerJohannes Berg <johannes.berg@intel.com>
Tue, 4 Feb 2014 20:58:07 +0000 (21:58 +0100)
commit9b81518dda62eaa678371de9fa70a4714e2a0460
treef577a829374c0f9daba8bf70e1ea3d6ac107089c
parent2ced0c2672977d91dc5182e735d21c0a2c4fc6a0
mac80211: add length check in ieee80211_is_robust_mgmt_frame()

A few places weren't checking that the frame passed to the
function actually has enough data even though the function
clearly documents it must have a payload byte. Make this
safer by changing the function to take an skb and checking
the length inside. The old version is preserved for now as
the rtl* drivers use it and don't have a correct skb.

Signed-off-by: Johannes Berg <johannes.berg@intel.com>
drivers/net/wireless/rtlwifi/rtl8188ee/trx.c
drivers/net/wireless/rtlwifi/rtl8192ce/trx.c
drivers/net/wireless/rtlwifi/rtl8192se/trx.c
drivers/net/wireless/rtlwifi/rtl8723ae/trx.c
include/linux/ieee80211.h
net/mac80211/rx.c
net/mac80211/tx.c
net/mac80211/wpa.c