Subject: Re: [PATCH] sotftmac: fix a slab corruption in WEP restricted key association

From: Daniel Drake <[email-masked]>
Date: Wed, 11 Oct 2006 20:34:11 -0400

Laurent Riffard wrote:
> Fix a slab corruption in ieee80211softmac_auth(). The size of a buffer
> was miscomputed.
> 
> see http://bugzilla.kernel.org/show_bug.cgi?id=7245
> 
> Acked-by: Daniel Drake <[email-masked]>"
> Signed-off-by: Laurent Riffard <[email-masked]>

Apparently the CC list didn't work out. Adding Johannes and netdev.

> net/ieee80211/softmac/ieee80211softmac_io.c |    2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
> 
> Index: linux-2.6-mm/net/ieee80211/softmac/ieee80211softmac_io.c
> ===================================================================
> --- linux-2.6-mm.orig/net/ieee80211/softmac/ieee80211softmac_io.c
> +++ linux-2.6-mm/net/ieee80211/softmac/ieee80211softmac_io.c
> @@ -304,7 +304,7 @@ ieee80211softmac_auth(struct ieee80211_a
>         2 +        /* Auth Transaction Seq */
>         2 +        /* Status Code */
>          /* Challenge Text IE */
> -        is_shared_response ? 0 : 1 + 1 + net->challenge_len
> +        (is_shared_response ? 1 + 1 + net->challenge_len : 0)
>     );
>     if (unlikely((*pkt) == NULL))
>         return 0;
>