提交 dfe6e81d 编写于 作者: A Andy Green 提交者: David S. Miller

[MAC80211]: Add get_unaligned to ieee80211_get_radiotap_len

ieee80211_get_radiotap_len() tries to dereference radiotap length without
taking care that it is completely unaligned and get_unaligned()
is required.
Signed-off-by: NAndy Green <andy@warmcat.com>
Signed-off-by: NJiri Benc <jbenc@suse.cz>
Signed-off-by: NJohn W. Linville <linville@tuxdriver.com>
上级 0ec0b7ac
......@@ -40,6 +40,7 @@
#include <linux/if_ether.h>
#include <linux/kernel.h>
#include <asm/unaligned.h>
/* Radiotap header version (from official NetBSD feed) */
#define IEEE80211RADIOTAP_VERSION "1.5"
......@@ -261,7 +262,7 @@ static inline int ieee80211_get_radiotap_len(unsigned char *data)
struct ieee80211_radiotap_header *hdr =
(struct ieee80211_radiotap_header *)data;
return le16_to_cpu(hdr->it_len);
return le16_to_cpu(get_unaligned(&hdr->it_len));
}
#endif /* IEEE80211_RADIOTAP_H */
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册