Page MenuHomeFreeBSD
Differential D36245

net80211: ieee80211_ies_expand() add extra length check
ClosedPublic
Actions

Authored by bz on Aug 17 2022, 4:52 PM.
Tags
None
Referenced Files
F145708085: D36245.id109467.diff
Mon, Feb 23, 10:42 AM
F145708075: D36245.id109467.diff
Mon, Feb 23, 10:41 AM
F145698956: D36245.id109534.diff
Mon, Feb 23, 7:32 AM
F145698936: D36245.id109534.diff
Mon, Feb 23, 7:32 AM
Unknown Object (File)
Sun, Feb 22, 10:12 AM
Unknown Object (File)
Mon, Feb 9, 2:33 PM
Unknown Object (File)
Jan 6 2026, 1:51 AM
Unknown Object (File)
Dec 18 2025, 5:47 AM
View All 74 Files
Subscribers
adrian
glebius
imp
melifaro

Details

Reviewers
adrian
Group Reviewers
wireless
Commits
rG31b4fa3dbcf1: net80211: ieee80211_ies_expand() add extra length check
rG9d2ba51806c3: net80211: ieee80211_ies_expand() add extra length check
Summary

Make sure the given IE length fits into the total length left when
parsing through the information elements. In theory I would say
discard everything if this happens but that proves hard with the
current code.

Sponsored by: The FreeBSD Foundation
MFC after: 1 week

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Revision Contents
Changeset List

PathSize
sys/
net80211/
8 lines

Diff 109534

View Options

sys/net80211/ieee80211_node.c

Loading...