mac80211: Only process mesh config header on frames that RA_MATCH
authorJavier Cardona <javier@cozybit.com>
Wed, 24 Oct 2012 19:43:30 +0000 (12:43 -0700)
committerBen Hutchings <ben@decadent.org.uk>
Fri, 16 Nov 2012 16:46:56 +0000 (16:46 +0000)
commite39761ee8faf2e80dc4ad22bfac43a122d9fd3a8
tree9a8d66e4fc1ddee8a7e58fee2986e114c30a9978
parentc5cb6b2df5fa914f57a36b7b03b01a4d9d29030f
mac80211: Only process mesh config header on frames that RA_MATCH

commit 555cb715be8ef98b8ec362b23dfc254d432a35b1 upstream.

Doing otherwise is wrong, and may wreak havoc on the mpp tables,
specially if the frame is encrypted.

Reported-by: Chaoxing Lin <Chaoxing.Lin@ultra-3eti.com>
Signed-off-by: Javier Cardona <javier@cozybit.com>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
[bwh: Backported to 3.2: we have a large block conditional on
 IEEE80211_RX_RA_MATCH rather than a goto conditional on the opposite,
 so delete the condition]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
net/mac80211/rx.c