Date: Tue, 23 Mar 2004 21:35:03 -0800 (PST) From: Bill Paul <wpaul@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/dev/if_ndis if_ndis.c Message-ID: <200403240535.i2O5Z3QT049564@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
wpaul 2004/03/23 21:35:03 PST
FreeBSD src repository
Modified files:
sys/dev/if_ndis if_ndis.c
Log:
The ndis_wlan_bssid_ex structure we retrieve in ndis_get_assoc() is
variable length, so we should not be trying to copy it into a fixed
length buffer, especially one on the stack. malloc() a buffer of the
right size and return a pointer to that instead.
Fixes a crash I discovered when testing whe a Cisco AP in infrastructure
mode, which returns several information elements that make the
ndis_wlan_bssid_ex structure larger than expected.
Revision Changes Path
1.50 +11 -5 src/sys/dev/if_ndis/if_ndis.c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200403240535.i2O5Z3QT049564>