diff options
author | Johannes Berg <johannes@sipsolutions.net> | 2009-04-30 20:09:56 +0200 |
---|---|---|
committer | John W. Linville <linville@tuxdriver.com> | 2009-05-04 22:22:10 +0200 |
commit | c0f0aac05fa84b37ed46db8cf6c8bee9a67bbcca (patch) | |
tree | c0748d3ba37d5d1666c5d7eaa91cc7af6a10acbe /net/wireless/scan.c | |
parent | mac80211: correct fragmentation threshold check (diff) | |
download | linux-c0f0aac05fa84b37ed46db8cf6c8bee9a67bbcca.tar.xz linux-c0f0aac05fa84b37ed46db8cf6c8bee9a67bbcca.zip |
cfg80211: fix truncated IEs
Another bug in the "cfg80211: do not replace BSS structs" patch,
a forgotten length update leads to bogus data being stored and
passed to userspace, often truncated.
Signed-off-by: Johannes Berg <johannes@sipsolutions.net>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Diffstat (limited to '')
-rw-r--r-- | net/wireless/scan.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/net/wireless/scan.c b/net/wireless/scan.c index 2ae65b39b529..1f260c40b6ca 100644 --- a/net/wireless/scan.c +++ b/net/wireless/scan.c @@ -395,6 +395,7 @@ cfg80211_bss_update(struct cfg80211_registered_device *dev, memcpy(ies, res->pub.information_elements, ielen); found->ies_allocated = true; found->pub.information_elements = ies; + found->pub.len_information_elements = ielen; } } } |