OSDN Git Service

wil6210: protect against invalid length of tx management frame
authorLior David <liord@codeaurora.org>
Sun, 30 Jul 2017 17:32:38 +0000 (20:32 +0300)
committerLior David <liord@codeaurora.org>
Sun, 30 Jul 2017 17:32:38 +0000 (20:32 +0300)
commit1b3f613621764b2b66259852a448924c2e1d6773
treed2753ff74e696eba82ebf302d8489f4bf47237ce
parent1e931d0f3f04979c5f03ebd811c0ee6d7d44937a
wil6210: protect against invalid length of tx management frame

This check is not valid:
if (len < sizeof(struct ieee80211_mgmt))
Because ieee80211_mgmt contains the ieee80211 header followed by
a union of various action frames, so the check will fail when trying
to send any management frame which is smaller than the largest action
frame in the union. This breaks FST and possibly other features.
Fix this by checking only against the header structure size.

Change-Id: I730300e180d9509f3555f16a0803af53cc8eca0a
Signed-off-by: Lior David <liord@codeaurora.org>
drivers/net/wireless/ath/wil6210/cfg80211.c