• Johannes Berg's avatar
    mac80211: validate TIM IE length (redux) · e7ec86f5
    Johannes Berg authored
    The TIM IE must not be shorter than 4 bytes, so verify that
    when parsing it and use the proper type. To ease that adjust
    struct ieee80211_tim_ie to have a virtual bitmap of size
    at least 1.
    
    Also check that the TIM IE is actually present before trying
    to parse it!
    
    Because other people may need the function, make it a static
    inline in ieee80211.h.
    
    (The original "mac80211: validate TIM IE length" was a minimal fix for
    2.6.30.  This purports to be the full, correct fix. -- JWL)
    Signed-off-by: default avatarJohannes Berg <johannes@sipsolutions.net>
    Signed-off-by: default avatarJohn W. Linville <linville@tuxdriver.com>
    e7ec86f5
ieee80211_i.h 33 KB