Page MenuHomeFreeBSD
Files F148140253

D3762.diff
No OneTemporary
Actions

D3762.diff
View Options

Index: head/sys/dev/wpi/if_wpi.c
===================================================================
--- head/sys/dev/wpi/if_wpi.c
+++ head/sys/dev/wpi/if_wpi.c
@@ -2603,6 +2603,11 @@
hdrlen = ieee80211_anyhdrsize(wh);
totlen = buf->m->m_pkthdr.len;
+ if (__predict_false(totlen < sizeof(struct ieee80211_frame_min))) {
+ error = EINVAL;
+ goto fail;
+ }
+
if (hdrlen & 3) {
/* First segment length must be a multiple of 4. */
pad = 4 - (hdrlen & 3);

File Metadata

Mime Type
text/plain
Expires
Tue, Mar 17, 1:10 AM (5 h, 46 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
29799698
Default Alt Text
D3762.diff (467 B)

Event Timeline