git.openpandora.org / pandora-kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 3eadd75) | patch
mac80211: fix HT information element parsing
authorJohannes Berg <johannes@sipsolutions.net>
Tue, 7 Oct 2008 17:31:17 +0000 (19:31 +0200)
committerJohn W. Linville <linville@tuxdriver.com>
Wed, 15 Oct 2008 00:47:15 +0000 (20:47 -0400)
commit09914813da37f1ee9d77998a0701629cfbbd98f4
tree6577e7769862378abf62e6867a54b71da1dc12c6tree | snapshot
parent3eadd751eb8cb8090a65b4fa72c6360fd1aa5f06commit | diff
mac80211: fix HT information element parsing

There's no checking that the HT IEs are of the right length
which can be used by an attacker to cause an out-of-bounds
access by sending a too short HT information/capability IE.
Fix it by simply pretending those IEs didn't exist when too
short.

Signed-off-by: Johannes Berg <johannes@sipsolutions.net>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
net/mac80211/ieee80211_i.h diff | blob | history
net/mac80211/mlme.c diff | blob | history
net/mac80211/util.c diff | blob | history
Pandora Kernel Repository