[lvc-project] [PATCH] wifi: mac80211: fix buffer overflow in ieee80211_rx_get_bigtk()

Igor A. Artemiev Igor.A.Artemiev at mcst.ru
Thu Oct 5 15:31:23 MSK 2023


On 10/4/23 17:58, Johannes Berg wrote:
> And ... how exactly do you propose that is going to happen?

'conf.keyidx', the value that is passed to the function, can be 0. But I 
missed checking the second argument of the ieee80211_rx_get_bigtk() 
function before calling it. Sorry to bother you.

Thanks,
Igor




More information about the lvc-project mailing list