Linux wireless drivers development
 help / color / mirror / Atom feed
* [PATCH] wifi: nl80211: Increase ie_len size to prevent truncated IEs in new peer notifications
@ 2026-06-04 20:30 Thiyagarajan Pandiyan
  2026-06-05  5:12 ` kernel test robot
  2026-06-05  7:46 ` kernel test robot
  0 siblings, 2 replies; 5+ messages in thread
From: Thiyagarajan Pandiyan @ 2026-06-04 20:30 UTC (permalink / raw)
  To: johannes; +Cc: linux-kernel, linux-wireless, Thiyagarajan Pandiyan

Currently, ie_len in cfg80211_notify_new_peer_candidate is defined as
1-byte field, capping the maximum IE list size at 255 bytes. When a
large beacon is received, the IE list is truncated, passing incomplete
data to wpa_supplicant. This causes supplicant to fail parsing the IEs.

Increasing the size of ie_len to allow the full length of the IE list to
be forwarded properly.

Signed-off-by: Thiyagarajan Pandiyan <thiyagarajan@aerlync.com>
---
 net/wireless/nl80211.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/net/wireless/nl80211.c b/net/wireless/nl80211.c
index 7db9cd433801..0d97a47c35fb 100644
--- a/net/wireless/nl80211.c
+++ b/net/wireless/nl80211.c
@@ -20958,7 +20958,7 @@ void nl80211_send_ibss_bssid(struct cfg80211_registered_device *rdev,
 }
 
 void cfg80211_notify_new_peer_candidate(struct net_device *dev, const u8 *addr,
-					const u8 *ie, u8 ie_len,
+					const u8 *ie, size_t ie_len,
 					int sig_dbm, gfp_t gfp)
 {
 	struct wireless_dev *wdev = dev->ieee80211_ptr;
-- 
2.43.0


^ permalink raw reply related	[flat|nested] 5+ messages in thread
* [PATCH] wifi: nl80211: Increase ie_len size to prevent truncated IEs in new peer notifications
@ 2026-06-05  5:43 Thiyagarajan Pandiyan
  2026-06-12  7:29 ` Thiyagarajan Pandiyan
  0 siblings, 1 reply; 5+ messages in thread
From: Thiyagarajan Pandiyan @ 2026-06-05  5:43 UTC (permalink / raw)
  To: johannes; +Cc: linux-kernel, linux-wireless, Thiyagarajan Pandiyan

Currently, ie_len in cfg80211_notify_new_peer_candidate is defined as
1-byte field, capping the maximum IE list size at 255 bytes. When a
large beacon is received, the IE list is truncated, passing incomplete
data to wpa_supplicant. This causes supplicant to fail parsing the IEs.

Increasing the size of ie_len to allow the full length of the IE list to
be forwarded properly.

Signed-off-by: Thiyagarajan Pandiyan <thiyagarajan@aerlync.com>
---
 include/net/cfg80211.h | 2 +-
 net/wireless/nl80211.c | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/include/net/cfg80211.h b/include/net/cfg80211.h
index 9d3639ff9c28..36af36533cac 100644
--- a/include/net/cfg80211.h
+++ b/include/net/cfg80211.h
@@ -8445,7 +8445,7 @@ void cfg80211_ibss_joined(struct net_device *dev, const u8 *bssid,
  * cfg80211 then sends a notification to userspace.
  */
 void cfg80211_notify_new_peer_candidate(struct net_device *dev,
-		const u8 *macaddr, const u8 *ie, u8 ie_len,
+		const u8 *macaddr, const u8 *ie, size_t ie_len,
 		int sig_dbm, gfp_t gfp);
 
 /**
diff --git a/net/wireless/nl80211.c b/net/wireless/nl80211.c
index 7db9cd433801..0d97a47c35fb 100644
--- a/net/wireless/nl80211.c
+++ b/net/wireless/nl80211.c
@@ -20958,7 +20958,7 @@ void nl80211_send_ibss_bssid(struct cfg80211_registered_device *rdev,
 }
 
 void cfg80211_notify_new_peer_candidate(struct net_device *dev, const u8 *addr,
-					const u8 *ie, u8 ie_len,
+					const u8 *ie, size_t ie_len,
 					int sig_dbm, gfp_t gfp)
 {
 	struct wireless_dev *wdev = dev->ieee80211_ptr;
-- 
2.43.0


^ permalink raw reply related	[flat|nested] 5+ messages in thread

end of thread, other threads:[~2026-06-12  7:29 UTC | newest]

Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-06-04 20:30 [PATCH] wifi: nl80211: Increase ie_len size to prevent truncated IEs in new peer notifications Thiyagarajan Pandiyan
2026-06-05  5:12 ` kernel test robot
2026-06-05  7:46 ` kernel test robot
  -- strict thread matches above, loose matches on Subject: below --
2026-06-05  5:43 Thiyagarajan Pandiyan
2026-06-12  7:29 ` Thiyagarajan Pandiyan

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox