Skip to content
Commit 7c1c73bf authored by Johannes Berg's avatar Johannes Berg
Browse files

wifi: mac80211: check EHT/TTLM action frame length



Check the EHT action frame length before accessing
the action code, if it's not present then the frame
cannot be valid.

Reported-by: default avatar <syzbot+75af45a00cf13243ba39@syzkaller.appspotmail.com>
Closes: https://lore.kernel.org/r/0000000000006c06870614886611@google.com/
Fixes: 8f500fbc ("wifi: mac80211: process and save negotiated TID to Link mapping request")
Link: https://msgid.link/20240326213858.19c84f34349f.I71b439f016b28f65284bb7646fe36343b74cbc9a@changeid


Signed-off-by: default avatarJohannes Berg <johannes.berg@intel.com>
parent 50108c35
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment