HomeFreeBSD

MFC r343234:

Description

MFC r343234:
run(4): add more length checks in Rx path.

  • Discard frames that are bigger than MCLBYTES (to prevent buffer overrun).
  • Check buffer length before accessing its contents.
  • Fix len <-> dmalen check - the last includes Rx Wireless information

structure size.

  • Fix out-of-bounds read during Rx node search for ACK / CTS frames

(monitor mode only).

While here:

  • Mark few suspicious places with comments.
  • Move common cleanup to the function end.

Details

Committed
avosJan 28 2019, 1:28 AM
Parents
rS343510: MFC r343342:
Branches
Unknown
Tags
Unknown

Event Timeline