diff options
| author | Ilan Peer <ilan.peer@intel.com> | 2025-09-07 11:51:17 +0300 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2025-12-07 06:12:23 +0900 |
| commit | 1ce5cec7fa62c5d4ad538b65ea5cca0812b82765 (patch) | |
| tree | bcac581bc811449976753148ac46aca50226d28c /net/mac80211 | |
| parent | 78d46f5276ed3589aaaa435580068c5b62efc921 (diff) | |
| download | linux-1ce5cec7fa62c5d4ad538b65ea5cca0812b82765.tar.gz linux-1ce5cec7fa62c5d4ad538b65ea5cca0812b82765.tar.bz2 linux-1ce5cec7fa62c5d4ad538b65ea5cca0812b82765.zip | |
wifi: mac80211: Fix HE capabilities element check
[ Upstream commit ea928544f3215fdeac24d66bef85e10bb638b8c1 ]
The element data length check did not account for the extra
octet used for the extension ID. Fix it.
Signed-off-by: Ilan Peer <ilan.peer@intel.com>
Signed-off-by: Miri Korenblit <miriam.rachel.korenblit@intel.com>
Link: https://patch.msgid.link/20250907115109.8da0012e2286.I8c0c69a0011f7153c13b365b14dfef48cfe7c3e3@changeid
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'net/mac80211')
| -rw-r--r-- | net/mac80211/mlme.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/mac80211/mlme.c b/net/mac80211/mlme.c index cc47d6b88f04..15826bbde70c 100644 --- a/net/mac80211/mlme.c +++ b/net/mac80211/mlme.c @@ -4386,7 +4386,7 @@ static u8 ieee80211_max_rx_chains(struct ieee80211_link_data *link, he_cap_elem = cfg80211_find_ext_elem(WLAN_EID_EXT_HE_CAPABILITY, ies->data, ies->len); - if (!he_cap_elem || he_cap_elem->datalen < sizeof(*he_cap)) + if (!he_cap_elem || he_cap_elem->datalen < sizeof(*he_cap) + 1) return chains; /* skip one byte ext_tag_id */ |