diff options
| author | Laurent Riffard <laurent.riffard@free.fr> | 2006-10-12 00:17:36 +0200 |
|---|---|---|
| committer | John W. Linville <linville@tuxdriver.com> | 2006-10-17 10:15:58 -0400 |
| commit | 6684e59aa3cf6cb7ebf04ea2953198500c93b0a9 (patch) | |
| tree | 8a5d8658486bbf100cb537ee375895244f726820 /net/ieee80211/softmac/ieee80211softmac_io.c | |
| parent | 5bb85f18087b10a908bd793e9fd3ccd63aebb724 (diff) | |
[PATCH] sotftmac: fix a slab corruption in WEP restricted key association
Fix a slab corruption in ieee80211softmac_auth(). The size of a buffer
was miscomputed.
see http://bugzilla.kernel.org/show_bug.cgi?id=7245
Acked-by: Daniel Drake <dsd@gentoo.org>
Signed-off-by: Laurent Riffard <laurent.riffard@free.fr>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Diffstat (limited to 'net/ieee80211/softmac/ieee80211softmac_io.c')
| -rw-r--r-- | net/ieee80211/softmac/ieee80211softmac_io.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/ieee80211/softmac/ieee80211softmac_io.c b/net/ieee80211/softmac/ieee80211softmac_io.c index e8419cfb058..b96931001b4 100644 --- a/net/ieee80211/softmac/ieee80211softmac_io.c +++ b/net/ieee80211/softmac/ieee80211softmac_io.c @@ -304,7 +304,7 @@ ieee80211softmac_auth(struct ieee80211_auth **pkt, 2 + /* Auth Transaction Seq */ 2 + /* Status Code */ /* Challenge Text IE */ - is_shared_response ? 0 : 1 + 1 + net->challenge_len + (is_shared_response ? 1 + 1 + net->challenge_len : 0) ); if (unlikely((*pkt) == NULL)) return 0; |