summary refs log tree commit diff
path: root/net/wireless
diff options
context:
space:
mode:
authorJouni Malinen <j@w1.fi>2013-11-02 15:57:36 +0200
committerJohannes Berg <johannes.berg@intel.com>2013-11-25 16:50:01 +0100
commit76a56eb3b0fe82f77b1fb604dbf4a408e6ad7ba2 (patch)
tree34753264772055a42bf2c23626ff14eb19a4edcf /net/wireless
parent2d3db210860f1df099a35b1dd54cca35454e0361 (diff)
downloadlinux-76a56eb3b0fe82f77b1fb604dbf4a408e6ad7ba2.tar.gz
mac80211_hwsim: Fix radiotap header for ACK frames
The earlier addition of rt_tsft to struct hwsim_radiotap_hdr updated
only mac80211_hwsim_monitor_tx() to fill in the new field.
mac80211_hwsim_monitor_ack() did not set the rt_tsft field and as such,
leaked eight bytes of kernel memory to user space. In addition, the
resulting radiotap header is invalid since the field offsets do not
match. Fix these issues by defining a separate radiotap header structure
for the ACK frame case which does not use all the fields.

Signed-off-by: Jouni Malinen <j@w1.fi>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Diffstat (limited to 'net/wireless')
0 files changed, 0 insertions, 0 deletions