]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
projects / FreeBSD / FreeBSD.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 442baa5) | patch
net80211: fix use-after-free in frame defragmentation procedure.
authoravos <avos@FreeBSD.org>
Sat, 28 May 2016 18:49:17 +0000 (18:49 +0000)
committeravos <avos@FreeBSD.org>
Sat, 28 May 2016 18:49:17 +0000 (18:49 +0000)
commitce3bc9d25892aa4dd07a917bbfd1e9b8267e3996
tree3620a0bead121b36e7c04ffa3b69a65273badb2dtree | snapshot
parent442baa51845cf38dbcfdc44bd8493defdaad630acommit | diff
net80211: fix use-after-free in frame defragmentation procedure.

- Assign frame sequence/fragment number before frame concatenation;
otherwise, frame header pointer (wh) will be invalid.
- Move this code block upper and eliminate duplicate 'lwh = mtod()'
assignment.

Tested with wpi(4) (transmitter) (STA mode) and urtwn(4) (receiver)
(HOSTAP mode).
sys/net80211/ieee80211_input.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.