DragonFlyBSD Kernel Audit
DF-0712 / fix_harness_run.log
← back to finding ↓ download raw
=== DF-0712: ieee80211_alloc_countryie 3-byte heap overflow ===
IEEE80211_COUNTRY_MAX_SIZE = 260
sizeof(struct ieee80211_appie) = 2 (ie_len header)
Feeding 84 channels -> 84 runs (== IEEE80211_COUNTRY_MAX_BANDS cap)

alloc size (kernel kmalloc arg) = 260 bytes
ie_data bytes available        = 258
ie_data valid indices          = 0..257
nruns=84  ie->len=0  aie->ie_len=258
highest ie_data index written   = 257

RESULT: no overflow detected (bug not present).