Commit c7378d7d authored by Benjamin Berg's avatar Benjamin Berg Committed by Johannes Berg
Browse files

wifi: cfg80211: check BSSID Index against MaxBSSID 



Add a verification that the BSSID Index does not exceed the maximum
number of BSSIDs in the Multiple-BSSID set.

Signed-off-by: default avatarBenjamin Berg <benjamin.berg@intel.com>
Reviewed-by: default avatarJohannes Berg <johannes.berg@intel.com>
Signed-off-by: default avatarMiri Korenblit <miriam.rachel.korenblit@intel.com>
Link: https://msgid.link/20240318184907.a7574d415adc.I02f40c2920a9f602898190679cc27d0c8ee2c67d@changeid


Signed-off-by: default avatarJohannes Berg <johannes.berg@intel.com>
parent 0dfedd48

net/wireless/scan.c

+2 −1
Original line number Diff line number Diff line
@@ -2447,7 +2447,8 @@ cfg80211_parse_mbssid_data(struct wiphy *wiphy, 
				 profile, profile_len);

			if (!mbssid_index_ie || mbssid_index_ie[1] < 1 ||

			    mbssid_index_ie[2] == 0 ||

			    mbssid_index_ie[2] > 46) {

			    mbssid_index_ie[2] > 46 ||

			    mbssid_index_ie[2] >= (1 << elem->data[0])) {

				/* No valid Multiple BSSID-Index element */

				continue;

			}