projects / GitHub / moto-9609 / android_kernel_motorola_exynos9610.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f1c1f17) | patch
mac80211: fix possible out-of-bounds access
authorJohannes Berg <johannes.berg@intel.com>
Wed, 14 Sep 2016 07:23:51 +0000 (09:23 +0200)
committerJohannes Berg <johannes.berg@intel.com>
Thu, 15 Sep 2016 14:46:16 +0000 (16:46 +0200)
commit93db1d9e6c96050b74bb2793de8db00cd0afe6ab
tree83a76bdd049de1a15b56a6d9cd4243486d1d5a0etree | snapshot (tar.gz zip)
parentf1c1f17ac52d22227c0074b3d661d7ed692b707acommit | diff
mac80211: fix possible out-of-bounds access

In the unlikely situation that the supplicant has negotiated
admission for the background AC (which it has no reason to as
it's not supposed to be requiring admission control to start
with, and we'd ignore such a requirement anyway), the loop
here may terminate with non_acm_ac == 4, which leads to an
array overrun.

Check this explicitly just for completeness.

Signed-off-by: Johannes Berg <johannes.berg@intel.com>
net/mac80211/mlme.c diff | blob | blame | history