diff options
| author | Johannes Berg <johannes.berg@intel.com> | 2024-02-26 22:34:06 +0300 |
|---|---|---|
| committer | Johannes Berg <johannes.berg@intel.com> | 2024-03-04 16:28:37 +0300 |
| commit | 9ad7974856926129f190ffbe3beea78460b3b7cc (patch) | |
| tree | 757f8b024473dc08a921afed812e26126ca268ba /Makefile | |
| parent | 4223675d2b5912060a85e48fd8fee51207e00957 (diff) | |
| download | linux-9ad7974856926129f190ffbe3beea78460b3b7cc.tar.xz | |
wifi: cfg80211: check A-MSDU format more carefully
If it looks like there's another subframe in the A-MSDU
but the header isn't fully there, we can end up reading
data out of bounds, only to discard later. Make this a
bit more careful and check if the subframe header can
even be present.
Reported-by: syzbot+d050d437fe47d479d210@syzkaller.appspotmail.com
Link: https://msgid.link/20240226203405.a731e2c95e38.I82ce7d8c0cc8970ce29d0a39fdc07f1ffc425be4@changeid
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Diffstat (limited to 'Makefile')
0 files changed, 0 insertions, 0 deletions