diff options
| author |   En-Wei Wu <en-wei.wu@canonical.com> | 2024-07-05 10:37:56 +0800 |
|---|---|---|
| committer |   Johannes Berg <johannes.berg@intel.com> | 2024-07-08 18:28:47 +0200 |
| commit | b5d14b0c6716fad7f0c94ac6e1d6f60a49f985c7 (patch) | |
| tree | 93537341965b20ca7c143dc904e7255e56fd5104 /include/linux/bcma/ssh:/git@git.zx2c4.com/git: | |
| parent | wifi: mac80211: clear vif drv_priv after remove_interface when stopping (diff) | |
wifi: virt_wifi: avoid reporting connection success with wrong SSID
When user issues a connection with a different SSID than the one
virt_wifi has advertised, the __cfg80211_connect_result() will
trigger the warning: WARN_ON(bss_not_found).
The issue is because the connection code in virt_wifi does not
check the SSID from user space (it only checks the BSSID), and
virt_wifi will call cfg80211_connect_result() with WLAN_STATUS_SUCCESS
even if the SSID is different from the one virt_wifi has advertised.
Eventually cfg80211 won't be able to find the cfg80211_bss and generate
the warning.
Fixed it by checking the SSID (from user space) in the connection code.
Fixes: c7cdba31ed8b ("mac80211-next: rtnetlink wifi simulation device")
Reported-by: syzbot+d6eb9cee2885ec06f5e3@syzkaller.appspotmail.com
Signed-off-by: En-Wei Wu <en-wei.wu@canonical.com>
Link: https://patch.msgid.link/20240705023756.10954-1-en-wei.wu@canonical.com
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Diffstat (limited to 'include/linux/bcma/ssh:/git@git.zx2c4.com/git:')
0 files changed, 0 insertions, 0 deletions