diff options
| author |   Johannes Berg <johannes.berg@intel.com> | 2016-09-14 09:23:51 +0200 |
|---|---|---|
| committer | Johannes Berg <johannes.berg@intel.com> | 2016-09-15 16:46:16 +0200 |
| commit | 93db1d9e6c96050b74bb2793de8db00cd0afe6ab (patch) | |
| tree | 83a76bdd049de1a15b56a6d9cd4243486d1d5a0e /net/mac80211/scan.c | |
| parent | cfg80211: allow connect keys only with default (TX) key (diff) | |
| download | linux-dev-93db1d9e6c96050b74bb2793de8db00cd0afe6ab.tar.xz linux-dev-93db1d9e6c96050b74bb2793de8db00cd0afe6ab.zip | |
mac80211: fix possible out-of-bounds access
In the unlikely situation that the supplicant has negotiated
admission for the background AC (which it has no reason to as
it's not supposed to be requiring admission control to start
with, and we'd ignore such a requirement anyway), the loop
here may terminate with non_acm_ac == 4, which leads to an
array overrun.
Check this explicitly just for completeness.
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Diffstat (limited to 'net/mac80211/scan.c')
0 files changed, 0 insertions, 0 deletions