diff options
| author | Johannes Berg <[email protected]> | 2021-04-08 15:45:20 +0200 |
|---|---|---|
| committer | Johannes Berg <[email protected]> | 2021-04-08 16:43:05 +0200 |
| commit | 9a6847ba1747858ccac53c5aba3e25c54fbdf846 (patch) | |
| tree | 3c9907d8cd594f3ec819146a807a0c5d6fe6869a /tools/perf/scripts/python/export-to-postgresql.py | |
| parent | abaf94ecc9c356d0b885a84edef4905cdd89cfdd (diff) | |
nl80211: fix beacon head validation
If the beacon head attribute (NL80211_ATTR_BEACON_HEAD)
is too short to even contain the frame control field,
we access uninitialized data beyond the buffer. Fix this
by checking the minimal required size first. We used to
do this until S1G support was added, where the fixed
data portion has a different size.
Reported-and-tested-by: [email protected]
Suggested-by: Eric Dumazet <[email protected]>
Fixes: 1d47f1198d58 ("nl80211: correctly validate S1G beacon head")
Signed-off-by: Johannes Berg <[email protected]>
Link: https://lore.kernel.org/r/20210408154518.d9b06d39b4ee.Iff908997b2a4067e8d456b3cb96cab9771d252b8@changeid
Signed-off-by: Johannes Berg <[email protected]>
Diffstat (limited to 'tools/perf/scripts/python/export-to-postgresql.py')
0 files changed, 0 insertions, 0 deletions