⬢ DragonFlyBSD Kernel Audit
DF-3374 / fix.diff
← back to finding ↓ download raw 
1
2
3
4
5
6
7
8
9
--- a/sys/netproto/802_11/wlan/ieee80211_sta.c
+++ b/sys/netproto/802_11/wlan/ieee80211_sta.c
@@ -1146 ieee80211_parse_csaparams()
 	KASSERT(vap->iv_state >= IEEE80211_S_RUN, ...);
 
+	/* DF-3374: mode+newchan+count must be inside the IE */
+	if (frm[1] < 3)
+		return;
 	if (csa->csa_mode > 1) {