git.openpandora.org / pandora-kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 38f0512) | patch
mac80211: check management frame header length
authorJohannes Berg <johannes.berg@intel.com>
Thu, 25 Oct 2012 22:33:36 +0000 (00:33 +0200)
committerBen Hutchings <ben@decadent.org.uk>
Fri, 16 Nov 2012 16:46:58 +0000 (16:46 +0000)
commitc63cddefa8d6360353ba0e60f42b6c82f1c11b3c
tree7659b5f99bc89eabfe6b4102868d62823a904e61tree | snapshot
parent38f0512e7ed39ee586e125b82a358e962a34f9a8commit | diff
mac80211: check management frame header length

commit 4a4f1a5808c8bb0b72a4f6e5904c53fb8c9cd966 upstream.

Due to pskb_may_pull() checking the skb length, all
non-management frames are checked on input whether
their 802.11 header is fully present. Also add that
check for management frames and remove a check that
is now duplicate. This prevents accessing skb data
beyond the frame end.

Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
net/mac80211/rx.c diff | blob | history
Pandora Kernel Repository