This is a note to let you know that I've just added the patch titled
wifi: mac80211: don't parse mbssid in assoc response
to the 5.4-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
wifi-mac80211-don-t-parse-mbssid-in-assoc-response.patch
and it can be found in the queue-5.4 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree,
please let <stable@xxxxxxxxxxxxxxx> know about it.
>From foo@baz Sat Oct 15 05:24:51 PM CEST 2022
From: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
Date: Fri, 14 Oct 2022 18:47:04 +0200
Subject: wifi: mac80211: don't parse mbssid in assoc response
To: linux-wireless@xxxxxxxxxxxxxxx, stable@xxxxxxxxxxxxxxx
Cc: Felix Fietkau <nbd@xxxxxxxx>, Thadeu Lima de Souza Cascardo <cascardo@xxxxxxxxxxxxx>, Marcus Meissner <meissner@xxxxxxx>, Jiri Kosina <jkosina@xxxxxxx>, Steve deRosier <steve.derosier@xxxxxxxxx>, Johannes Berg <johannes.berg@xxxxxxxxx>
Message-ID: <20221014184650.f3deb2e15fcb.I6c0186979a2872e7f7da75f9f8f93b07046afcf2@changeid>
From: Johannes Berg <johannes.berg@xxxxxxxxx>
This is simply not valid and simplifies the next commit.
I'll make a separate patch for this in the current main
tree as well.
Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
---
net/mac80211/mlme.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
--- a/net/mac80211/mlme.c
+++ b/net/mac80211/mlme.c
@@ -3224,7 +3224,7 @@ static bool ieee80211_assoc_success(stru
pos = mgmt->u.assoc_resp.variable;
ieee802_11_parse_elems(pos, len - (pos - (u8 *)mgmt), false, &elems,
- mgmt->bssid, assoc_data->bss->bssid);
+ mgmt->bssid, NULL);
if (!elems.supp_rates) {
sdata_info(sdata, "no SuppRates element in AssocResp\n");
@@ -3576,7 +3576,7 @@ static void ieee80211_rx_mgmt_assoc_resp
pos = mgmt->u.assoc_resp.variable;
ieee802_11_parse_elems(pos, len - (pos - (u8 *)mgmt), false, &elems,
- mgmt->bssid, assoc_data->bss->bssid);
+ mgmt->bssid, NULL);
if (status_code == WLAN_STATUS_ASSOC_REJECTED_TEMPORARILY &&
elems.timeout_int &&
Patches currently in stable-queue which might be from johannes@xxxxxxxxxxxxxxxx are
queue-5.4/wifi-mac80211-don-t-parse-mbssid-in-assoc-response.patch
queue-5.4/mac80211-mlme-find-auth-challenge-directly.patch
queue-5.4/wifi-mac80211-fix-mbssid-parsing-use-after-free.patch
