diff options
| author | Jakub Kicinski <[email protected]> | 2025-05-07 02:06:50 +0000 |
|---|---|---|
| committer | Jakub Kicinski <[email protected]> | 2025-05-07 02:06:50 +0000 |
| commit | 9540984da649d46f699c47f28c68bbd3c9d99e4c (patch) | |
| tree | 9441c1961b48cdb04ea30449061176cdb86834a1 /net/wireless/scan.c | |
| parent | Merge tag 'linux-can-fixes-for-6.15-20250506' of git://git.kernel.org/pub/scm... (diff) | |
| parent | wifi: iwlwifi: add support for Killer on MTL (diff) | |
| download | kernel-9540984da649d46f699c47f28c68bbd3c9d99e4c.tar.gz kernel-9540984da649d46f699c47f28c68bbd3c9d99e4c.zip | |
Merge tag 'wireless-2025-05-06' of https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless
Johannes Berg says:
====================
Couple of fixes:
* iwlwifi: add two missing device entries
* cfg80211: fix a potential out-of-bounds access
* mac80211: fix format of TID to link mapping action frames
* tag 'wireless-2025-05-06' of https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless:
wifi: iwlwifi: add support for Killer on MTL
wifi: mac80211: fix the type of status_code for negotiated TID to Link Mapping
wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation
====================
Link: https://patch.msgid.link/[email protected]
Signed-off-by: Jakub Kicinski <[email protected]>
Diffstat (limited to 'net/wireless/scan.c')
| -rw-r--r-- | net/wireless/scan.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/wireless/scan.c b/net/wireless/scan.c index 9865f305275d..ddd3a97f6609 100644 --- a/net/wireless/scan.c +++ b/net/wireless/scan.c @@ -2681,7 +2681,7 @@ cfg80211_defrag_mle(const struct element *mle, const u8 *ie, size_t ielen, /* Required length for first defragmentation */ buf_len = mle->datalen - 1; for_each_element(elem, mle->data + mle->datalen, - ielen - sizeof(*mle) + mle->datalen) { + ie + ielen - mle->data - mle->datalen) { if (elem->id != WLAN_EID_FRAGMENT) break; |