Commit a4acb447 authored May 17, 2018 by Dedy Lansky Committed by Gerrit - the friendly Code Review server May 23, 2018

nl80211: fix nlmsg allocation in cfg80211_ft_event



Allocation size of nlmsg in cfg80211_ft_event is based on ric_ies_len
and doesn't take into account ies_len. This leads to
NL80211_CMD_FT_EVENT message construction failure in case ft_event
contains large enough ies buffer.
Add ies_len to the nlmsg allocation size.

Change-Id: Ib6a9426543d8cb87035333d8b664a929de2f42d1
Signed-off-by: Dedy Lansky <dlansky@codeaurora.org>

parent 9e5a39a7

net/wireless/nl80211.c

+2 −1

Original line number	Diff line number	Diff line
		@@ -15147,7 +15147,8 @@ void cfg80211_ft_event(struct net_device *netdev,
		if (!ft_event->target_ap)
		return;

		msg = nlmsg_new(100 + ft_event->ric_ies_len, GFP_KERNEL);
		msg = nlmsg_new(100 + ft_event->ies_len + ft_event->ric_ies_len,
		GFP_KERNEL);
		if (!msg)
		return;