diff options
| author | Johannes Berg | 2008-10-07 19:31:17 +0200 |
|---|---|---|
| committer | John W. Linville | 2008-10-15 02:47:15 +0200 |
| commit | 09914813da37f1ee9d77998a0701629cfbbd98f4 (patch) | |
| tree | 6577e7769862378abf62e6867a54b71da1dc12c6 /drivers/net/wireless/iwlwifi/iwl-5000.c | |
| parent | p54: Fix compilation problem on PPC (diff) | |
| download | kernel-qcow2-linux-09914813da37f1ee9d77998a0701629cfbbd98f4.tar.gz kernel-qcow2-linux-09914813da37f1ee9d77998a0701629cfbbd98f4.tar.xz kernel-qcow2-linux-09914813da37f1ee9d77998a0701629cfbbd98f4.zip | |
mac80211: fix HT information element parsing
There's no checking that the HT IEs are of the right length
which can be used by an attacker to cause an out-of-bounds
access by sending a too short HT information/capability IE.
Fix it by simply pretending those IEs didn't exist when too
short.
Signed-off-by: Johannes Berg <johannes@sipsolutions.net>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Diffstat (limited to 'drivers/net/wireless/iwlwifi/iwl-5000.c')
0 files changed, 0 insertions, 0 deletions