Commit c0f0aac0 authored by Johannes Berg's avatar Johannes Berg Committed by John W. Linville

cfg80211: fix truncated IEs

Another bug in the "cfg80211: do not replace BSS structs" patch,
a forgotten length update leads to bogus data being stored and
passed to userspace, often truncated.
Signed-off-by: default avatarJohannes Berg <johannes@sipsolutions.net>
Signed-off-by: default avatarJohn W. Linville <linville@tuxdriver.com>
parent 8ccd8f21
...@@ -395,6 +395,7 @@ cfg80211_bss_update(struct cfg80211_registered_device *dev, ...@@ -395,6 +395,7 @@ cfg80211_bss_update(struct cfg80211_registered_device *dev,
memcpy(ies, res->pub.information_elements, ielen); memcpy(ies, res->pub.information_elements, ielen);
found->ies_allocated = true; found->ies_allocated = true;
found->pub.information_elements = ies; found->pub.information_elements = ies;
found->pub.len_information_elements = ielen;
} }
} }
} }
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment