diff options
| author | Miri Korenblit <miriam.rachel.korenblit@intel.com> | 2026-05-04 10:20:46 +0300 |
|---|---|---|
| committer | Johannes Berg <johannes.berg@intel.com> | 2026-05-05 13:10:15 +0300 |
| commit | 03c41203ee5a833a9d7a7630be190830cede29d8 (patch) | |
| tree | 60076c4a96827cf2aa76bbba47cba4f02ef36c66 /include | |
| parent | ad3d4d3d897f4013b4c050aa2b2aac27edd37420 (diff) | |
| download | linux-03c41203ee5a833a9d7a7630be190830cede29d8.tar.xz | |
wifi: mac80211: avoid out-of-bounds access in monitor
In NAN, we don't know on what band the frame will be sent. Therefore we
set info->band to NUM_NL80211_BANDS. However, this leads to out-of-bound
access in ieee80211_add_tx_radiotap_header when we try to access the
sbands array.
Fix it by not accessing the array if the band is NUM_NL80211_BANDS.
This means that we will not report rate info for legacy rate in NAN.
But nobody really cares about it.
Reviewed-by: Ilan Peer <ilan.peer@intel.com>
Reviewed-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Miri Korenblit <miriam.rachel.korenblit@intel.com>
Link: https://patch.msgid.link/20260504101829.346c9893d136.I15919027597c04ec35c6217db6e52e2a605e5cfc@changeid
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Diffstat (limited to 'include')
0 files changed, 0 insertions, 0 deletions