Andriy Voskoboinyk
8722deef15
net80211: fix use-after-free in frame defragmentation procedure.
...
- Assign frame sequence/fragment number before frame concatenation;
otherwise, frame header pointer (wh) will be invalid.
- Move this code block upper and eliminate duplicate 'lwh = mtod()'
assignment.
Tested with wpi(4) (transmitter) (STA mode) and urtwn(4) (receiver)
(HOSTAP mode).
2016-05-28 18:49:17 +00:00
..
2016-05-27 18:45:11 +00:00
2016-05-26 22:34:25 +00:00
2016-05-20 15:43:51 +00:00
2016-05-27 19:23:15 +00:00
2016-05-27 22:26:43 +00:00
2016-05-28 17:43:40 +00:00
2016-05-27 07:33:49 +00:00
2016-05-27 17:40:29 +00:00
2016-05-27 22:16:46 +00:00
2016-05-28 16:06:07 +00:00
2016-05-16 19:42:38 +00:00
2016-05-28 13:05:39 +00:00
2016-05-22 18:16:25 +00:00
2016-05-27 22:32:44 +00:00
2016-05-26 23:59:42 +00:00
2016-05-22 12:46:34 +00:00
2016-05-27 17:00:15 +00:00
2016-05-25 06:47:28 +00:00
2016-05-28 00:22:39 +00:00
2016-05-28 08:32:15 +00:00
2016-05-28 18:49:17 +00:00
2016-05-26 19:17:51 +00:00
2016-05-27 17:31:02 +00:00
2016-05-27 17:31:02 +00:00
2016-05-10 20:14:11 +00:00
2016-05-26 22:03:28 +00:00
2016-05-25 12:03:21 +00:00
2016-05-22 13:58:32 +00:00
2016-05-26 10:03:30 +00:00
2016-05-27 08:48:33 +00:00
2016-05-22 12:46:34 +00:00
2016-05-27 23:49:16 +00:00
2016-05-22 14:31:20 +00:00
2016-05-27 19:15:45 +00:00
2016-05-26 09:09:11 +00:00
2016-05-17 12:52:31 +00:00