| commit | e2b5227faaf33109d9d00f8a99f7b4f45a9d9c9f | |
| author | Johannes Berg <johannes.berg@intel.com> | |
| Wed, 5 Oct 2016 14:42:06 +0000 (5 16:42 +0200) | ||
| committer | Johannes Berg <johannes.berg@intel.com> | |
| Wed, 12 Oct 2016 07:19:11 +0000 (12 09:19 +0200) | ||
| tree | 871ad06936c30c4e73755777537a49eb7e6fcb43 | treesnapshot (tar.gz zip) |
| parent | 8b935ee2ea17db720d70f6420f77f594c0c93f75 | commitdiff |
mac80211: validate DA/SA during A-MSDU decapsulation
As pointed out by Michael Braun, we don't check inner L2 addresses
during A-MSDU decapsulation, leading to the possibility that, for
example, a station associated to an AP sends frames as though they
came from somewhere else.
Fix this problem by letting cfg80211 validate the addresses, as
indicated by passing in the ones that need to be validated.
Reported-by: Michael Braun <michael-dev@fami-braun.de>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
As pointed out by Michael Braun, we don't check inner L2 addresses
during A-MSDU decapsulation, leading to the possibility that, for
example, a station associated to an AP sends frames as though they
came from somewhere else.
Fix this problem by letting cfg80211 validate the addresses, as
indicated by passing in the ones that need to be validated.
Reported-by: Michael Braun <michael-dev@fami-braun.de>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
| net/mac80211/rx.c | diffblobblamehistory |