Kernel/iwd
3
0
Fork 0
mirror of https://git.kernel.org/pub/scm/network/wireless/iwd.git synced 2024-12-22 13:02:44 +01:00
Code Releases Activity

rrm: relax Reporting Detail subelement length check

Browse Source 
Since Reporting Detail subelement is listed as 'extensible', make sure
that the length check is not overly restrictive.  We only interpret the
first field.
This commit is contained in:
Denis Kenzior 2021-10-20 11:48:26 -05:00
parent 42ab82c20c
commit ae0ee89d72
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/rrm.c
View File

@ -570,7 +570,7 @@ static void rrm_handle_beacon_request(struct rrm_state *rrm,
break;
case RRM_BEACON_REQ_SUBELEM_ID_REPORTING_DETAIL:
if (length != 1) {
if (length < 1) {
l_error("Invalid length in reporting detail");
goto reject_refused;
}