summaryrefslogtreecommitdiff
path: root/net/mac80211
diff options
context:
space:
mode:
authorJohannes Berg <johannes.berg@intel.com>2023-08-15 21:28:01 +0200
committerJohannes Berg <johannes.berg@intel.com>2023-08-22 21:40:39 +0200
commitfba360a047d5eeeb9d4b7c3a9b1c8308980ce9a6 (patch)
tree49364a307714c86a7c33cc9f85cf058f2d6497a6 /net/mac80211
parent67dfa589aa8806c7959cbca2f4613b8d41c75a06 (diff)
downloadlwn-fba360a047d5eeeb9d4b7c3a9b1c8308980ce9a6.tar.gz
lwn-fba360a047d5eeeb9d4b7c3a9b1c8308980ce9a6.zip
wifi: mac80211_hwsim: drop short frames
While technically some control frames like ACK are shorter and end after Address 1, such frames shouldn't be forwarded through wmediumd or similar userspace, so require the full 3-address header to avoid accessing invalid memory if shorter frames are passed in. Reported-by: syzbot+b2645b5bf1512b81fa22@syzkaller.appspotmail.com Reviewed-by: Jeff Johnson <quic_jjohnson@quicinc.com> Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Diffstat (limited to 'net/mac80211')
0 files changed, 0 insertions, 0 deletions