diff options
| author | Johannes Berg <johannes.berg@intel.com> | 2026-04-28 12:25:41 +0300 |
|---|---|---|
| committer | Johannes Berg <johannes.berg@intel.com> | 2026-05-05 15:49:04 +0300 |
| commit | 0a621df46d5544f1b4f1c0572f07e1286b68c66a (patch) | |
| tree | de7a65d00979cf323a7b121ea42bd9d1cc68568d /include/linux/timerqueue.h | |
| parent | 07f3e2174606202f7954e3a0454dd59064148610 (diff) | |
| download | linux-0a621df46d5544f1b4f1c0572f07e1286b68c66a.tar.xz | |
wifi: mac80211: don't parse full UHR operation from beacons
Currently, as noted in the comment, ieee80211_uhr_oper_size_ok()
will reject the element coming from the beacon, since it's too
short. However, this is incorrect in general, since the element
is extensible, and such extensions could be present in a beacon,
and then it might pass muster anyway.
Using the frame type we now have in the element parse result,
check that it's not coming from a beacon. The size was already
checked (according to frame type) during parsing.
Link: https://patch.msgid.link/20260428112708.41a7aacdda0c.I0d83c8c9cbee41fd2599480cad815b94867aa1f8@changeid
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Diffstat (limited to 'include/linux/timerqueue.h')
0 files changed, 0 insertions, 0 deletions
