summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLaurent Riffard <laurent.riffard@free.fr>2006-10-12 00:17:36 +0200
committerChris Wright <chrisw@sous-sol.org>2006-12-01 16:12:37 -0800
commite8203cf3c3824105a01b0e7476b01d389710631c (patch)
tree8a396834cd5bbf911a50ab6da1ce631c1112e5c4
parent542975fee3541dff69a4f064ad459940f54f1c32 (diff)
[PATCH] softmac: fix a slab corruption in WEP restricted key association
Fix a slab corruption in ieee80211softmac_auth(). The size of a buffer was miscomputed. see http://bugzilla.kernel.org/show_bug.cgi?id=7245 Acked-by: Daniel Drake <dsd@gentoo.org> Signed-off-by: Laurent Riffard <laurent.riffard@free.fr> Signed-off-by: John W. Linville <linville@tuxdriver.com> Signed-off-by: Chris Wright <chrisw@sous-sol.org>
-rw-r--r--net/ieee80211/softmac/ieee80211softmac_io.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/net/ieee80211/softmac/ieee80211softmac_io.c b/net/ieee80211/softmac/ieee80211softmac_io.c
index 6ae5a1dc7956..3b67d1976914 100644
--- a/net/ieee80211/softmac/ieee80211softmac_io.c
+++ b/net/ieee80211/softmac/ieee80211softmac_io.c
@@ -304,7 +304,7 @@ ieee80211softmac_auth(struct ieee80211_auth **pkt,
2 + /* Auth Transaction Seq */
2 + /* Status Code */
/* Challenge Text IE */
- is_shared_response ? 0 : 1 + 1 + net->challenge_len
+ (is_shared_response ? 1 + 1 + net->challenge_len : 0)
);
if (unlikely((*pkt) == NULL))
return 0;