Page MenuHomeFreeBSD
Files F137007041

D3762.id9237.diff
No OneTemporary
Actions

D3762.id9237.diff
View Options

Index: head/sys/dev/wpi/if_wpi.c
===================================================================
--- head/sys/dev/wpi/if_wpi.c
+++ head/sys/dev/wpi/if_wpi.c
@@ -2603,6 +2603,11 @@
hdrlen = ieee80211_anyhdrsize(wh);
totlen = buf->m->m_pkthdr.len;
+ if (__predict_false(totlen < sizeof(struct ieee80211_frame_min))) {
+ error = EINVAL;
+ goto fail;
+ }
+
if (hdrlen & 3) {
/* First segment length must be a multiple of 4. */
pad = 4 - (hdrlen & 3);

File Metadata

Mime Type
text/plain
Expires
Fri, Nov 21, 11:34 PM (5 h, 20 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
25827343
Default Alt Text
D3762.id9237.diff (467 B)

Event Timeline