* Re: [PATCH] nl80211: 802.11: mesh: Handle Beacon/probe response IE length in cfg80211_notify_new_peer_candidate() for 80211ac/ax mode.
[not found] <CAHG=F9_0VsZ3hFnbD4_eFmr_4D_6Oraqcu+JPOUA=SJ3u9dL9g@mail.gmail.com>
@ 2019-11-22 12:39 ` Johannes Berg
0 siblings, 0 replies; only message in thread
From: Johannes Berg @ 2019-11-22 12:39 UTC (permalink / raw)
To: Shashidhara C, davem, linux-wireless, netdev, linux-kernel
On Sat, 2019-11-16 at 15:55 +0530, Shashidhara C wrote:
> In function cfg80211_notify_new_peer_candidate(), beacon IE length (i.e. u8 ie_len) is not
> handled for processing 80211AC/AX beacon/probe response. ie_len can hold maximum
> integer value of 255. In case of 80211AC/AX, the mesh beacon/probe response IE length
> is more than 255, making ie_len to wrap around and causing failure while parsing
> beacon/probe response IEs in wpa_supplicant.
>
> ie_len type in cfg80211_notify_new_peer_candidate() is modified to u16 to handle this issue.
>
> Issue is found in v4.4.60, issue exists in latest v5.4.0-rc6. Verified the fix in v4.4.60.
[snip]
You cannot send patches as html email :)
johannes
^ permalink raw reply [flat|nested] only message in thread