diff options
| author | Johannes Berg <johannes.berg@intel.com> | 2014-03-04 12:46:53 (GMT) |
|---|---|---|
| committer | Johannes Berg <johannes.berg@intel.com> | 2014-03-05 14:49:54 (GMT) |
| commit | 864a6040f395464003af8dd0d8ca86fed19866d4 (patch) | |
| tree | 1cfbdad9ad7df012fbddac170402795f2c99ef12 /drivers/net/wireless | |
| parent | bc00a91d627026f08abf69bf5d0015499dd30c2a (diff) | |
| download | linux-864a6040f395464003af8dd0d8ca86fed19866d4.tar.xz | |
mac80211: clear sequence/fragment number in QoS-null frames
Avoid leaking data by sending uninitialized memory and setting an
invalid (non-zero) fragment number (the sequence number is ignored
anyway) by setting the seq_ctrl field to zero.
Cc: stable@vger.kernel.org
Fixes: 3f52b7e328c5 ("mac80211: mesh power save basics")
Fixes: ce662b44ce22 ("mac80211: send (QoS) Null if no buffered frames")
Reviewed-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Diffstat (limited to 'drivers/net/wireless')
0 files changed, 0 insertions, 0 deletions