From: Johannes Berg Date: Sat, 18 Apr 2009 15:33:24 +0000 (+0200) Subject: mac80211: validate TIM IE length (redux) X-Git-Tag: v2.6.31-rc1~330^2~568^2~22 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e7ec86f54e519e8e86f1cf328db13263f3ef8bd4;p=pandora-kernel.git mac80211: validate TIM IE length (redux) The TIM IE must not be shorter than 4 bytes, so verify that when parsing it and use the proper type. To ease that adjust struct ieee80211_tim_ie to have a virtual bitmap of size at least 1. Also check that the TIM IE is actually present before trying to parse it! Because other people may need the function, make it a static inline in ieee80211.h. (The original "mac80211: validate TIM IE length" was a minimal fix for 2.6.30. This purports to be the full, correct fix. -- JWL) Signed-off-by: Johannes Berg Signed-off-by: John W. Linville --- Reading git-diff-tree failed