* [PATCH] cfg80211: fix truncated IEs
@ 2009-04-30 18:09 Johannes Berg
0 siblings, 0 replies; only message in thread
From: Johannes Berg @ 2009-04-30 18:09 UTC (permalink / raw)
To: John Linville; +Cc: linux-wireless
Another bug in the "cfg80211: do not replace BSS structs" patch,
a forgotten length update leads to bogus data being stored and
passed to userspace, often truncated.
Signed-off-by: Johannes Berg <johannes@sipsolutions.net>
---
net/wireless/scan.c | 1 +
1 file changed, 1 insertion(+)
--- wireless-testing.orig/net/wireless/scan.c 2009-04-30 19:37:39.000000000 +0200
+++ wireless-testing/net/wireless/scan.c 2009-04-30 19:37:44.000000000 +0200
@@ -393,6 +393,7 @@ cfg80211_bss_update(struct cfg80211_regi
memcpy(ies, res->pub.information_elements, ielen);
found->ies_allocated = true;
found->pub.information_elements = ies;
+ found->pub.len_information_elements = ielen;
}
}
}
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2009-04-30 18:10 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2009-04-30 18:09 [PATCH] cfg80211: fix truncated IEs Johannes Berg
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox