diff options
| author | Johannes Berg <johannes.berg@intel.com> | 2012-10-26 00:33:36 +0200 |
|---|---|---|
| committer | Johannes Berg <johannes.berg@intel.com> | 2012-10-26 22:52:41 +0200 |
| commit | 4a4f1a5808c8bb0b72a4f6e5904c53fb8c9cd966 (patch) | |
| tree | 337243407a1d2240af23de94b042592311aaae63 /net/wireless | |
| parent | wireless: drop invalid mesh address extension frames (diff) | |
| download | linux-4a4f1a5808c8bb0b72a4f6e5904c53fb8c9cd966.tar.xz linux-4a4f1a5808c8bb0b72a4f6e5904c53fb8c9cd966.zip | |
mac80211: check management frame header length
Due to pskb_may_pull() checking the skb length, all
non-management frames are checked on input whether
their 802.11 header is fully present. Also add that
check for management frames and remove a check that
is now duplicate. This prevents accessing skb data
beyond the frame end.
Cc: stable@vger.kernel.org
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Diffstat (limited to 'net/wireless')
0 files changed, 0 insertions, 0 deletions