diff options
| author | Jouni Malinen <jouni@qca.qualcomm.com> | 2011-08-11 11:46:22 +0300 |
|---|---|---|
| committer | Dmitry Shmidt <dimitrysh@google.com> | 2012-01-24 15:33:15 -0800 |
| commit | 87159de9c30dab02b84cbaffa7498140d4ebc1a1 (patch) | |
| tree | 0239ff8486bf98b9a19c8199dd2b09e5cff73c29 /net | |
| parent | d692df224b8605095cb7f770c1c99d3150834daf (diff) | |
| download | kernel_samsung_crespo-87159de9c30dab02b84cbaffa7498140d4ebc1a1.zip kernel_samsung_crespo-87159de9c30dab02b84cbaffa7498140d4ebc1a1.tar.gz kernel_samsung_crespo-87159de9c30dab02b84cbaffa7498140d4ebc1a1.tar.bz2 | |
nl80211/cfg80211: Make addition of new sinfo fields safer
Add a comment pointing out the use of enum station_info_flags for
all new struct station_info fields. In addition, memset the sinfo
buffer to zero before use on all paths in the current tree to avoid
leaving uninitialized pointers in the data.
Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
Diffstat (limited to 'net')
| -rw-r--r-- | net/mac80211/sta_info.c | 1 | ||||
| -rw-r--r-- | net/wireless/nl80211.c | 1 |
2 files changed, 2 insertions, 0 deletions
diff --git a/net/mac80211/sta_info.c b/net/mac80211/sta_info.c index ca7bf10..3ff633e 100644 --- a/net/mac80211/sta_info.c +++ b/net/mac80211/sta_info.c @@ -334,6 +334,7 @@ static int sta_info_finish_insert(struct sta_info *sta, bool async) ieee80211_sta_debugfs_add(sta); rate_control_add_sta_debugfs(sta); + memset(&sinfo, 0, sizeof(sinfo)); sinfo.filled = 0; sinfo.generation = local->sta_generation; cfg80211_new_sta(sdata->dev, sta->sta.addr, &sinfo, GFP_KERNEL); diff --git a/net/wireless/nl80211.c b/net/wireless/nl80211.c index 863e502..33115be 100644 --- a/net/wireless/nl80211.c +++ b/net/wireless/nl80211.c @@ -2240,6 +2240,7 @@ static int nl80211_dump_station(struct sk_buff *skb, } while (1) { + memset(&sinfo, 0, sizeof(sinfo)); err = dev->ops->dump_station(&dev->wiphy, netdev, sta_idx, mac_addr, &sinfo); if (err == -ENOENT) |