Commit 1186980d authored Jul 07, 2011 by Luciano Coelho Committed by John W. Linville Jul 07, 2011

mac80211: fix ie memory allocation for scheduled scans



We were not allocating memory for the IEs passed in the scheduled_scan
request and this was causing memory corruption (buffer overflow).

Signed-off-by: Luciano Coelho <coelho@ti.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>

parent 6ae8ec27

net/mac80211/scan.c

+2 −1

Original line number	Diff line number	Diff line
		@@ -877,7 +877,8 @@ int ieee80211_request_sched_scan_start(struct ieee80211_sub_if_data *sdata,
		for (i = 0; i < IEEE80211_NUM_BANDS; i++) {
		local->sched_scan_ies.ie[i] = kzalloc(2 +
		IEEE80211_MAX_SSID_LEN +
		local->scan_ies_len,
		local->scan_ies_len +
		req->ie_len,
		GFP_KERNEL);
		if (!local->sched_scan_ies.ie[i]) {
		ret = -ENOMEM;