diff options
| author | Johannes Berg <johannes.berg@intel.com> | 2024-03-26 23:38:58 +0300 |
|---|---|---|
| committer | Johannes Berg <johannes.berg@intel.com> | 2024-04-08 21:11:21 +0300 |
| commit | 7c1c73bf84c50b641449f9811e2196cdc3ca4a1b (patch) | |
| tree | bce0832fde605abfdf36981c4302bb67a0e30bf2 /net/mac80211/rate.c | |
| parent | 50108c352db70405b3d71d8099d0b3adc3b3352c (diff) | |
| download | linux-7c1c73bf84c50b641449f9811e2196cdc3ca4a1b.tar.xz | |
wifi: mac80211: check EHT/TTLM action frame length
Check the EHT action frame length before accessing
the action code, if it's not present then the frame
cannot be valid.
Reported-by: syzbot+75af45a00cf13243ba39@syzkaller.appspotmail.com
Closes: https://lore.kernel.org/r/0000000000006c06870614886611@google.com/
Fixes: 8f500fbc6c65 ("wifi: mac80211: process and save negotiated TID to Link mapping request")
Link: https://msgid.link/20240326213858.19c84f34349f.I71b439f016b28f65284bb7646fe36343b74cbc9a@changeid
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Diffstat (limited to 'net/mac80211/rate.c')
0 files changed, 0 insertions, 0 deletions