On Mon, 2009-01-12 at 17:03 +0200, Jouni Malinen wrote: > > Should we sanity-check the input? E.g. in nl80211, ensure that it's > > (<type><len><data...>)* with <len> being correct and no final padding? > > And maybe that there isn't anything in those IEs that we've already > > added, like an SSID? > > [snip long explanation] Ok, makes sense, let's leave it as-is then, we allow root to shoot himself into the foot anyway. johannes
Attachment:
signature.asc
Description: This is a digitally signed message part
