From 5a40c49c44f7cc4808bce6c0b45f8b8e85cf264d Mon Sep 17 00:00:00 2001
From: Andrew Zaborowski <andrew.zaborowski@intel.com>
Date: Mon, 8 Jul 2019 18:59:32 +0200
Subject: [PATCH] mpdu: Validate action frame minimum length

Action frames must at least have the Category byte
---
 src/mpdu.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/mpdu.c b/src/mpdu.c
index 6e7fb32f..eb141c75 100644
--- a/src/mpdu.c
+++ b/src/mpdu.c
@@ -587,7 +587,7 @@ static bool validate_mgmt_mpdu(const struct mmpdu_header *mpdu, int len,
 		return validate_deauthentication_mmpdu(mpdu, len, offset);
 	case MPDU_MANAGEMENT_SUBTYPE_ACTION:
 	case MPDU_MANAGEMENT_SUBTYPE_ACTION_NO_ACK:
-		return true;
+		return *offset + 1 <= len;
 	default:
 		return false;
 	}