commit | d8ca16db6bb23d03fcb794df44bae64ae976f27c | [log] [tgz] |
---|---|---|
author | Johannes Berg <johannes.berg@intel.com> | Thu Jan 23 16:20:29 2014 +0100 |
committer | Johannes Berg <johannes.berg@intel.com> | Tue Feb 04 21:58:07 2014 +0100 |
tree | f577a829374c0f9daba8bf70e1ea3d6ac107089c | |
parent | ae811e21df28deb4c2adab0a47fc3da4f56d777b [diff] |
mac80211: add length check in ieee80211_is_robust_mgmt_frame() A few places weren't checking that the frame passed to the function actually has enough data even though the function clearly documents it must have a payload byte. Make this safer by changing the function to take an skb and checking the length inside. The old version is preserved for now as the rtl* drivers use it and don't have a correct skb. Signed-off-by: Johannes Berg <johannes.berg@intel.com>