| commit | 09914813da37f1ee9d77998a0701629cfbbd98f4 | [log] [tgz] |
|---|---|---|
| author | Johannes Berg <johannes@sipsolutions.net> | Tue Oct 07 19:31:17 2008 +0200 |
| committer | John W. Linville <linville@tuxdriver.com> | Tue Oct 14 20:47:15 2008 -0400 |
| tree | 6577e7769862378abf62e6867a54b71da1dc12c6 | |
| parent | 3eadd751eb8cb8090a65b4fa72c6360fd1aa5f06 [diff] |
mac80211: fix HT information element parsing There's no checking that the HT IEs are of the right length which can be used by an attacker to cause an out-of-bounds access by sending a too short HT information/capability IE. Fix it by simply pretending those IEs didn't exist when too short. Signed-off-by: Johannes Berg <johannes@sipsolutions.net> Signed-off-by: John W. Linville <linville@tuxdriver.com>