Re: [PATCH 2.6.30!] mac80211: validate TIM IE length

Johannes Berg
2009-04-16T22:22:10Z

[-- Attachment #1: Type: text/plain, Size: 624 bytes --]

On Fri, 2009-04-17 at 00:18 +0200, Johannes Berg wrote:
> The TIM IE must not be shorter than 4 bytes, so verify that
> when parsing it and use the proper type. To ease that adjust
> struct ieee80211_tim_ie to have a virtual bitmap of size
> at least 1.
>
> Also check that the TIM IE is actually present before trying
> to parse it!
>
> Because other people may need the function, make it a static
> inline in ieee80211.h.
>
> Signed-off-by: Johannes Berg <johannes@sipsolutions.net>
> ---
> I can provide a shorter fix for 2.6.30 if required.
>
> Kalle!!

Oops, sorry, that was Vivek :)

johannes

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 836 bytes --]