commit e438768ff9b22c83a968e14b79e8c83128e8bfe4
author Luis R. Rodriguez <mcgrof@do-not-panic.com> Tue Nov 05 09:18:01 2013 -0800
committer Johannes Berg <johannes.berg@intel.com> Mon Nov 25 20:51:02 2013 +0100
tree 956366ad035f64af8965c3a737eaa74598d1e1b6
parent cc493e4f5296f4da111f25ea4a216bb77270ccc6

cfg80211: check regulatory request alpha2 early

Currently nl80211 allows userspace to send the kernel
a bogus regulatory domain with at most 32 rules set
and it won't reject it until after its allocated
memory. Let's be smart about it and take advantage
that the last_request is now available under RTNL
and check if the alpha2 matches an expected request
and reject any bogus userspace requests prior to
hitting the memory allocator.

Signed-off-by: Luis R. Rodriguez <mcgrof@do-not-panic.com>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>

net/wireless/reg.c

diff --git a/net/wireless/reg.c b/net/wireless/reg.c
index b4b1687..d8f047a 100644
--- a/net/wireless/reg.c
+++ b/net/wireless/reg.c
@@ -450,7 +450,7 @@
 	return kobject_uevent(&reg_pdev->dev.kobj, KOBJ_CHANGE);
 }
 
-static bool reg_is_valid_request(const char *alpha2)
+bool reg_is_valid_request(const char *alpha2)
 {
 	struct regulatory_request *lr = get_last_request();