commit 6684e59aa3cf6cb7ebf04ea2953198500c93b0a9
author Laurent Riffard <laurent.riffard@free.fr> Thu Oct 12 00:17:36 2006 +0200
committer John W. Linville <linville@tuxdriver.com> Tue Oct 17 10:15:58 2006 -0400
tree 8a5d8658486bbf100cb537ee375895244f726820
parent 5bb85f18087b10a908bd793e9fd3ccd63aebb724

[PATCH] sotftmac: fix a slab corruption in WEP restricted key association

Fix a slab corruption in ieee80211softmac_auth(). The size of a buffer
was miscomputed.

see http://bugzilla.kernel.org/show_bug.cgi?id=7245

Acked-by: Daniel Drake <dsd@gentoo.org>
Signed-off-by: Laurent Riffard <laurent.riffard@free.fr>
Signed-off-by: John W. Linville <linville@tuxdriver.com>

net/ieee80211/softmac/ieee80211softmac_io.c

diff --git a/net/ieee80211/softmac/ieee80211softmac_io.c b/net/ieee80211/softmac/ieee80211softmac_io.c
index e8419cf..b969310 100644
--- a/net/ieee80211/softmac/ieee80211softmac_io.c
+++ b/net/ieee80211/softmac/ieee80211softmac_io.c
@@ -304,7 +304,7 @@
 		2 +		/* Auth Transaction Seq */
 		2 +		/* Status Code */
 		 /* Challenge Text IE */
-		is_shared_response ? 0 : 1 + 1 + net->challenge_len
+		(is_shared_response ? 1 + 1 + net->challenge_len : 0)
 	);
 	if (unlikely((*pkt) == NULL))
 		return 0;