Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit c49dc900 authored by Dan Carpenter's avatar Dan Carpenter Committed by Johannes Berg
Browse files

cfg80211: off by one in ieee80211_bss() 



We do a:

	sprintf(buf, " Last beacon: %ums ago",
		elapsed_jiffies_msecs(bss->ts));

elapsed_jiffies_msecs() can return a 10 digit number so "buf" needs to
be 31 characters long.

Signed-off-by: default avatarDan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: default avatarJohannes Berg <johannes.berg@intel.com>
parent 8680451f

net/wireless/scan.c

+1 −1
Original line number Diff line number Diff line
@@ -1358,7 +1358,7 @@ ieee80211_bss(struct wiphy *wiphy, struct iw_request_info *info, 
						  &iwe, IW_EV_UINT_LEN);

	}



	buf = kmalloc(30, GFP_ATOMIC);

	buf = kmalloc(31, GFP_ATOMIC);

	if (buf) {

		memset(&iwe, 0, sizeof(iwe));

		iwe.cmd = IWEVCUSTOM;