diff options
| author | Johannes Berg <johannes@sipsolutions.net> | 2009-04-30 20:09:56 +0200 |
|---|---|---|
| committer | John W. Linville <linville@tuxdriver.com> | 2009-05-04 16:22:10 -0400 |
| commit | c0f0aac05fa84b37ed46db8cf6c8bee9a67bbcca (patch) | |
| tree | c0748d3ba37d5d1666c5d7eaa91cc7af6a10acbe /net/wireless/scan.c | |
| parent | 8ccd8f21122dcc30a665516d43aa8b4aa8ae51f6 (diff) | |
cfg80211: fix truncated IEs
Another bug in the "cfg80211: do not replace BSS structs" patch,
a forgotten length update leads to bogus data being stored and
passed to userspace, often truncated.
Signed-off-by: Johannes Berg <johannes@sipsolutions.net>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Diffstat (limited to 'net/wireless/scan.c')
| -rw-r--r-- | net/wireless/scan.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/net/wireless/scan.c b/net/wireless/scan.c index 2ae65b39b529..1f260c40b6ca 100644 --- a/net/wireless/scan.c +++ b/net/wireless/scan.c @@ -395,6 +395,7 @@ cfg80211_bss_update(struct cfg80211_registered_device *dev, memcpy(ies, res->pub.information_elements, ielen); found->ies_allocated = true; found->pub.information_elements = ies; + found->pub.len_information_elements = ielen; } } } |