Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1758354AbWK2WEg (ORCPT ); Wed, 29 Nov 2006 17:04:36 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1758352AbWK2WEf (ORCPT ); Wed, 29 Nov 2006 17:04:35 -0500 Received: from 216-99-217-87.dsl.aracnet.com ([216.99.217.87]:62676 "EHLO sous-sol.org") by vger.kernel.org with ESMTP id S1758294AbWK2WEH (ORCPT ); Wed, 29 Nov 2006 17:04:07 -0500 Message-Id: <20061129220539.979217000@sous-sol.org> References: <20061129220111.137430000@sous-sol.org> User-Agent: quilt/0.45-1 Date: Wed, 29 Nov 2006 14:00:27 -0800 From: Chris Wright To: linux-kernel@vger.kernel.org, stable@kernel.org Cc: Justin Forbes , Zwane Mwaikambo , "Theodore Ts'o" , Randy Dunlap , Dave Jones , Chuck Wolber , Chris Wedgwood , Michael Krufky , torvalds@osdl.org, akpm@osdl.org, alan@lxorguk.ukuu.org.uk, Laurent Riffard , Daniel Drake , John W Linville Subject: [patch 16/23] softmac: fix a slab corruption in WEP restricted key association Content-Disposition: inline; filename=softmac-fix-a-slab-corruption-in-wep-restricted-key-association.patch Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1286 Lines: 36 -stable review patch. If anyone has any objections, please let us know. ------------------ From: Laurent Riffard Fix a slab corruption in ieee80211softmac_auth(). The size of a buffer was miscomputed. see http://bugzilla.kernel.org/show_bug.cgi?id=7245 Acked-by: Daniel Drake Signed-off-by: Laurent Riffard Signed-off-by: John W. Linville Signed-off-by: Chris Wright --- net/ieee80211/softmac/ieee80211softmac_io.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- linux-2.6.18.4.orig/net/ieee80211/softmac/ieee80211softmac_io.c +++ linux-2.6.18.4/net/ieee80211/softmac/ieee80211softmac_io.c @@ -304,7 +304,7 @@ ieee80211softmac_auth(struct ieee80211_a 2 + /* Auth Transaction Seq */ 2 + /* Status Code */ /* Challenge Text IE */ - is_shared_response ? 0 : 1 + 1 + net->challenge_len + (is_shared_response ? 1 + 1 + net->challenge_len : 0) ); if (unlikely((*pkt) == NULL)) return 0; -- - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/