Search Linux Wireless

[PATCH] cfg80211: fix truncated IEs

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Another bug in the "cfg80211: do not replace BSS structs" patch,
a forgotten length update leads to bogus data being stored and
passed to userspace, often truncated.

Signed-off-by: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
---
 net/wireless/scan.c |    1 +
 1 file changed, 1 insertion(+)

--- wireless-testing.orig/net/wireless/scan.c	2009-04-30 19:37:39.000000000 +0200
+++ wireless-testing/net/wireless/scan.c	2009-04-30 19:37:44.000000000 +0200
@@ -393,6 +393,7 @@ cfg80211_bss_update(struct cfg80211_regi
 					memcpy(ies, res->pub.information_elements, ielen);
 					found->ies_allocated = true;
 					found->pub.information_elements = ies;
+					found->pub.len_information_elements = ielen;
 				}
 			}
 		}


--
To unsubscribe from this list: send the line "unsubscribe linux-wireless" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Host AP]     [ATH6KL]     [Linux Bluetooth]     [Linux Netdev]     [Kernel Newbies]     [Linux Kernel]     [IDE]     [Security]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux ATA RAID]     [Samba]     [Device Mapper]
  Powered by Linux