| commit | 62bf1d762e24006fa9b6c8d56a22cf47a2310af3 | |
| author | Harvey Harrison <harvey.harrison@gmail.com> | |
| Wed, 16 Jul 2008 01:44:05 +0000 (15 18:44 -0700) | ||
| committer | John W. Linville <linville@tuxdriver.com> | |
| Fri, 22 Aug 2008 20:29:53 +0000 (22 16:29 -0400) | ||
| tree | a541e842ae0aff4040e030f320b8e6f03479a22f | treesnapshot (tar.gz zip) |
| parent | 798ee9850e9bf94b4436f9c7238823322e326885 | commitdiff |
mac80211: explicitly check skb->len
ieee80211_get_hdrlen_from_skb internally checks the skb is long enough to
hold the full ieee80211_hdr, else it returns zero. Use ieee80211_hdrlen
which always returns the hdrlen and check the remaining room in the
skb explicitly when removing encryption headers or the qos control field.
Signed-off-by: Harvey Harrison <harvey.harrison@gmail.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
ieee80211_get_hdrlen_from_skb internally checks the skb is long enough to
hold the full ieee80211_hdr, else it returns zero. Use ieee80211_hdrlen
which always returns the hdrlen and check the remaining room in the
skb explicitly when removing encryption headers or the qos control field.
Signed-off-by: Harvey Harrison <harvey.harrison@gmail.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
| net/mac80211/main.c | diffblobblamehistory |