diff options
Diffstat (limited to 'net/mac80211/util.c')
-rw-r--r-- | net/mac80211/util.c | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/net/mac80211/util.c b/net/mac80211/util.c index 11244212f41d..61876eb50b49 100644 --- a/net/mac80211/util.c +++ b/net/mac80211/util.c | |||
@@ -588,8 +588,10 @@ u32 ieee802_11_parse_elems_crc(u8 *start, size_t len, | |||
588 | elems->cf_params_len = elen; | 588 | elems->cf_params_len = elen; |
589 | break; | 589 | break; |
590 | case WLAN_EID_TIM: | 590 | case WLAN_EID_TIM: |
591 | elems->tim = pos; | 591 | if (elen >= sizeof(struct ieee80211_tim_ie)) { |
592 | elems->tim_len = elen; | 592 | elems->tim = (void *)pos; |
593 | elems->tim_len = elen; | ||
594 | } | ||
593 | break; | 595 | break; |
594 | case WLAN_EID_IBSS_PARAMS: | 596 | case WLAN_EID_IBSS_PARAMS: |
595 | elems->ibss_params = pos; | 597 | elems->ibss_params = pos; |