diff options
author | Johannes Berg <johannes.berg@intel.com> | 2023-08-15 21:28:01 +0200 |
---|---|---|
committer | Johannes Berg <johannes.berg@intel.com> | 2023-08-22 21:40:39 +0200 |
commit | fba360a047d5eeeb9d4b7c3a9b1c8308980ce9a6 (patch) | |
tree | 49364a307714c86a7c33cc9f85cf058f2d6497a6 /net/mac80211 | |
parent | 67dfa589aa8806c7959cbca2f4613b8d41c75a06 (diff) | |
download | lwn-fba360a047d5eeeb9d4b7c3a9b1c8308980ce9a6.tar.gz lwn-fba360a047d5eeeb9d4b7c3a9b1c8308980ce9a6.zip |
wifi: mac80211_hwsim: drop short frames
While technically some control frames like ACK are shorter and
end after Address 1, such frames shouldn't be forwarded through
wmediumd or similar userspace, so require the full 3-address
header to avoid accessing invalid memory if shorter frames are
passed in.
Reported-by: syzbot+b2645b5bf1512b81fa22@syzkaller.appspotmail.com
Reviewed-by: Jeff Johnson <quic_jjohnson@quicinc.com>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Diffstat (limited to 'net/mac80211')
0 files changed, 0 insertions, 0 deletions