diff options
| author | David S. Miller <davem@davemloft.net> | 2009-05-21 00:31:25 (GMT) |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2009-05-21 00:31:25 (GMT) |
| commit | 86c2fe1e3adacec9204c03f2b056b49534ecf0ed (patch) | |
| tree | 9d6a2c3f3802cd83d5a266df1d2576bd77aaad93 /net/wireless/wext.c | |
| parent | 1ddbcb005c395518c2cd0df504cff3d4b5c85853 (diff) | |
| parent | a6c67339784db5763d6f20ae1881aeebe8c5a9f4 (diff) | |
| download | linux-86c2fe1e3adacec9204c03f2b056b49534ecf0ed.tar.xz | |
Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-2.6
Diffstat (limited to 'net/wireless/wext.c')
| -rw-r--r-- | net/wireless/wext.c | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/net/wireless/wext.c b/net/wireless/wext.c index cb6a5bb..0e59f9a 100644 --- a/net/wireless/wext.c +++ b/net/wireless/wext.c @@ -786,6 +786,13 @@ static int ioctl_standard_iw_point(struct iw_point *iwp, unsigned int cmd, err = -EFAULT; goto out; } + + if (cmd == SIOCSIWENCODEEXT) { + struct iw_encode_ext *ee = (void *) extra; + + if (iwp->length < sizeof(*ee) + ee->key_len) + return -EFAULT; + } } err = handler(dev, info, (union iwreq_data *) iwp, extra); |