mac80211: fix MU-MIMO follow-MAC mode
authorJohannes Berg <johannes.berg@intel.com>
Thu, 13 Apr 2017 12:23:49 +0000 (14:23 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 27 Apr 2017 07:10:38 +0000 (09:10 +0200)
commit87cfeaa5e5a1834c2f55ade5da5a117991305269
tree8aea2b106cabb277ed9edd98f4b84217aed12c67
parente0411f1eb549a7993c9821c05f1787c0bd1523b4
mac80211: fix MU-MIMO follow-MAC mode

commit 9e478066eae41211c92a8f63cc69aafc391bd6ab upstream.

There are two bugs in the follow-MAC code:
 * it treats the radiotap header as the 802.11 header
   (therefore it can't possibly work)
 * it doesn't verify that the skb data it accesses is actually
   present in the header, which is mitigated by the first point

Fix this by moving all of this out into a separate function.
This function copies the data it needs using skb_copy_bits()
to make sure it can be accessed if it's paged, and offsets
that by the possibly present vendor radiotap header.

This also makes all those conditions more readable.

Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/mac80211/rx.c