Date: Fri, 10 Jul 2009 11:02:31 +0000 (UTC) From: Rui Paulo <rpaulo@FreeBSD.org> To: src-committers@freebsd.org, svn-src-projects@freebsd.org Subject: svn commit: r195543 - projects/mesh11s/sys/net80211 Message-ID: <200907101102.n6AB2VF5018067@svn.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: rpaulo Date: Fri Jul 10 11:02:31 2009 New Revision: 195543 URL: http://svn.freebsd.org/changeset/base/195543 Log: mesh_verify_meshpeerver(): verify len Sponsored by: The FreeBSD Foundation Modified: projects/mesh11s/sys/net80211/ieee80211_mesh.c Modified: projects/mesh11s/sys/net80211/ieee80211_mesh.c ============================================================================== --- projects/mesh11s/sys/net80211/ieee80211_mesh.c Fri Jul 10 11:00:52 2009 (r195542) +++ projects/mesh11s/sys/net80211/ieee80211_mesh.c Fri Jul 10 11:02:31 2009 (r195543) @@ -2052,7 +2052,9 @@ mesh_verify_meshpeerver(struct ieee80211 const struct ieee80211_meshpeerver_ie *meshpeerver = (const struct ieee80211_meshpeerver_ie *) ie; - /* XXX verify length */ + if (meshpeerver->peerver_len != + sizeof(struct ieee80211_meshpeerver_ie) - 2) + return 1; return memcmp(meshpeerver->peerver_proto, peer, 4); }
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200907101102.n6AB2VF5018067>