Author: iwasaki
Date: Sat Mar 17 06:49:53 2012
New Revision: 233078
URL: http://svn.freebsd.org/changeset/base/233078
Log:
MFC r232785
Fix wrong asresp frame parsing in iwi_checkforqos().
Modified:
stable/8/sys/dev/iwi/if_iwi.c
Modified: stable/8/sys/dev/iwi/if_iwi.c
==============================================================================
--- stable/8/sys/dev/iwi/if_iwi.c Sat Mar 17 06:48:13 2012
(r233077)
+++ stable/8/sys/dev/iwi/if_iwi.c Sat Mar 17 06:49:53 2012
(r233078)
@@ -1355,8 +1355,8 @@ iwi_checkforqos(struct ieee80211vap *vap
frm += 2;
wme = NULL;
- while (frm < efrm) {
- IEEE80211_VERIFY_LENGTH(efrm - frm, frm[1], return);
+ while (efrm - frm > 1) {
+ IEEE80211_VERIFY_LENGTH(efrm - frm, frm[1] + 2, return);
switch (*frm) {
case IEEE80211_ELEMID_VENDOR:
if (iswmeoui(frm))
_______________________________________________
svn-src-all@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/svn-src-all
To unsubscribe, send any mail to "svn-src-all-unsubscr...@freebsd.org"
