Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 798985c6 authored by Vasanthakumar Thiagarajan's avatar Vasanthakumar Thiagarajan Committed by Kalle Valo
Browse files

ath6kl: Fix possible unaligned memory access in ath6kl_get_rsn_capab() 



alignment is not taken care in accessing pairwise cipher and AKM suite
count which are parsed from rsn ie. Fix this alignment issue.

Reported-by: default avatarJoe Perches <joe@perches.com>
Signed-off-by: default avatarVasanthakumar Thiagarajan <vthiagar@qca.qualcomm.com>
Signed-off-by: default avatarKalle Valo <kvalo@qca.qualcomm.com>
parent c4f7863e

drivers/net/wireless/ath/ath6kl/cfg80211.c

+2 −2
Original line number Diff line number Diff line
@@ -2591,14 +2591,14 @@ static int ath6kl_get_rsn_capab(struct cfg80211_beacon_data *beacon, 
	/* skip pairwise cipher suite */

	if (rsn_ie_len < 2)

		return -EINVAL;

	cnt = *((u16 *) rsn_ie);

	cnt = get_unaligned_le16(rsn_ie);

	rsn_ie += (2 + cnt * 4);

	rsn_ie_len -= (2 + cnt * 4);



	/* skip akm suite */

	if (rsn_ie_len < 2)

		return -EINVAL;

	cnt = *((u16 *) rsn_ie);

	cnt = get_unaligned_le16(rsn_ie);

	rsn_ie += (2 + cnt * 4);

	rsn_ie_len -= (2 + cnt * 4);