diff options
author | Johannes Berg <johannes.berg@intel.com> | 2013-07-30 16:34:28 -0400 |
---|---|---|
committer | Johannes Berg <johannes.berg@intel.com> | 2013-07-30 16:40:34 -0400 |
commit | c319d50bfcf678c2857038276d9fab3c6646f3bf (patch) | |
tree | fcdfa7d5417adb75c7957272dbb1e5ed91da3001 /net/mac80211/mlme.c | |
parent | 23df0b731954502a9391e739b92927cee4360343 (diff) |
nl80211: fix another nl80211_fam.attrbuf race
This is similar to the race Linus had reported, but in this case
it's an older bug: nl80211_prepare_wdev_dump() uses the wiphy
index in cb->args[0] as it is and thus parses the message over
and over again instead of just once because 0 is the first valid
wiphy index. Similar code in nl80211_testmode_dump() correctly
offsets the wiphy_index by 1, do that here as well.
Cc: stable@vger.kernel.org
Reported-by: Ben Hutchings <ben@decadent.org.uk>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Diffstat (limited to 'net/mac80211/mlme.c')
0 files changed, 0 insertions, 0 deletions