mac80211: fix IBSS presp allocation size
authorJohannes Berg <johannes.berg@intel.com>
Thu, 27 Apr 2017 11:19:04 +0000 (13:19 +0200)
committerRaspbian kernel package updater <root@raspbian.org>
Sun, 23 Jul 2017 03:00:29 +0000 (03:00 +0000)
commite25d4712f48bdaf5497acbc7dbb12cf9afca5fe9
tree0bd3f226b0ee0cd69a84bf24db2c496a2053ccee
parent829fb88ae677dd2ce99dbe1bbfbd1c43c1e7013b
mac80211: fix IBSS presp allocation size

commit f1f3e9e2a50a70de908f9dfe0d870e9cdc67e042 upstream.

When VHT IBSS support was added, the size of the extra elements
wasn't considered in ieee80211_ibss_build_presp(), which makes
it possible that it would overrun the allocated buffer. Fix it
by allocating the necessary space.

Fixes: abcff6ef01f9 ("mac80211: add VHT support for IBSS")
Reported-by: Shaul Triebitz <shaul.triebitz@intel.com>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/mac80211/ibss.c