---

yaml --- r: 65247 b: refs/heads/master c: 04045f9 h: refs/heads/master i: 65245: 951dfbd 65243: 2d5eefb 65239: af073f3 65231: 690bfea 65215: e01ff9b v: v3
git-mirror · Oct 2, 2007 · e81df56 · e81df56
1 parent 9d6ed63
commit e81df56
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/[refs] b/[refs]
@@ -1,2 +1,2 @@
 ---
-refs/heads/master: 9b42c336d06411e6463949d2dac63949f66ff70b
+refs/heads/master: 04045f98e0457aba7d4e6736f37eed189c48a5f7
diff --git a/trunk/net/ieee80211/ieee80211_rx.c b/trunk/net/ieee80211/ieee80211_rx.c
@@ -366,6 +366,12 @@ int ieee80211_rx(struct ieee80211_device *ieee, struct sk_buff *skb,
 	frag = WLAN_GET_SEQ_FRAG(sc);
 	hdrlen = ieee80211_get_hdrlen(fc);
 
+	if (skb->len < hdrlen) {
+		printk(KERN_INFO "%s: invalid SKB length %d\n",
+			dev->name, skb->len);
+		goto rx_dropped;
+	}
+
 	/* Put this code here so that we avoid duplicating it in all
 	 * Rx paths. - Jean II */
 #ifdef CONFIG_WIRELESS_EXT