diff options
| author | Du Cheng <ducheng2@gmail.com> | 2021-05-10 12:16:49 +0800 |
|---|---|---|
| committer | Johannes Berg <johannes.berg@intel.com> | 2021-05-31 21:39:10 +0200 |
| commit | e298aa358f0ca658406d524b6639fe389cb6e11e (patch) | |
| tree | b2e85597f417c85427254241077919472b53bf17 /net/mac80211/ocb.c | |
| parent | b90f51e8e1f5014c01c82a7bf4c611643d0a8bcb (diff) | |
| download | linux-e298aa358f0ca658406d524b6639fe389cb6e11e.tar.bz2 | |
mac80211: fix skb length check in ieee80211_scan_rx()
Replace hard-coded compile-time constants for header length check
with dynamic determination based on the frame type. Otherwise, we
hit a validation WARN_ON in cfg80211 later.
Fixes: cd418ba63f0c ("mac80211: convert S1G beacon to scan results")
Reported-by: syzbot+405843667e93b9790fc1@syzkaller.appspotmail.com
Signed-off-by: Du Cheng <ducheng2@gmail.com>
Link: https://lore.kernel.org/r/20210510041649.589754-1-ducheng2@gmail.com
[style fixes, reword commit message]
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Diffstat (limited to 'net/mac80211/ocb.c')
0 files changed, 0 insertions, 0 deletions