On Mon, 2012-10-29 at 19:50 +0100, Johannes Berg wrote:
> + while (iedatalen > 0) {
> + u16 attr_len;
> +
> + /* P2P attribute ID & size must fit */
> + if (iedatalen < 3)
> + return -EILSEQ;
Ok, damn, this is wrong. Even that could spill over into the next IE :-(
johannes
--
To unsubscribe from this list: send the line "unsubscribe linux-wireless" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
