3
0
mirror of https://git.kernel.org/pub/scm/network/wireless/iwd.git synced 2024-11-22 14:49:24 +01:00

mpdu: fix transaction_sequence byte-ordering

transaction_sequence was not being considered in host CPU byte order
This commit is contained in:
Denis Kenzior 2015-01-22 12:38:28 -06:00
parent e60b814dc8
commit 5247695d56

View File

@ -71,6 +71,8 @@ static bool validate_disassociation_mgmt_mpdu(const struct mpdu *mpdu,
static bool validate_authentication_mgmt_mpdu(const struct mpdu *mpdu,
int len, int *offset)
{
uint16_t transaction_sequence;
if (len < *offset + 6)
return false;
@ -80,8 +82,10 @@ static bool validate_authentication_mgmt_mpdu(const struct mpdu *mpdu,
case MPDU_AUTH_ALGO_OPEN_SYSTEM:
return *offset <= len;
case MPDU_AUTH_ALGO_SHARED_KEY:
if (mpdu->auth.transaction_sequence < 2 ||
mpdu->auth.transaction_sequence > 3)
transaction_sequence =
L_LE16_TO_CPU(mpdu->auth.transaction_sequence);
if (transaction_sequence < 2 || transaction_sequence > 3)
return *offset == len;
if (len < *offset + 2)