diff options
| author | Johannes Berg <johannes.berg@intel.com> | 2022-09-29 21:50:44 +0200 |
|---|---|---|
| committer | Johannes Berg <johannes.berg@intel.com> | 2022-10-10 09:50:37 +0200 |
| commit | 567e14e39e8f8c6997a1378bc3be615afca86063 (patch) | |
| tree | 1acfd496cd23c8027f019dd925cf298c3ab06457 /net/mac80211/aead_api.c | |
| parent | ff05d4b45dd89b922578dac497dcabf57cf771c6 (diff) | |
| download | linux-567e14e39e8f8c6997a1378bc3be615afca86063.tar.bz2 | |
wifi: cfg80211: ensure length byte is present before access
When iterating the elements here, ensure the length byte is
present before checking it to see if the entire element will
fit into the buffer.
Longer term, we should rewrite this code using the type-safe
element iteration macros that check all of this.
Fixes: 0b8fb8235be8 ("cfg80211: Parsing of Multiple BSSID information in scanning")
Reported-by: Soenke Huster <shuster@seemoo.tu-darmstadt.de>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Diffstat (limited to 'net/mac80211/aead_api.c')
0 files changed, 0 insertions, 0 deletions