From: Johannes Berg <johannes@sipsolutions.net>
Date: Tue, 7 Oct 2008 17:31:17 +0000 (+0200)
Subject: mac80211: fix HT information element parsing
X-Git-Tag: v2.6.28-rc1~292^2~3^2~12
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=09914813da37f1ee9d77998a0701629cfbbd98f4;p=pandora-kernel.git

mac80211: fix HT information element parsing

There's no checking that the HT IEs are of the right length
which can be used by an attacker to cause an out-of-bounds
access by sending a too short HT information/capability IE.
Fix it by simply pretending those IEs didn't exist when too
short.

Signed-off-by: Johannes Berg <johannes@sipsolutions.net>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
---

Reading git-diff-tree failed