| commit | 850e8f6fbd5d0003b0f1119d19a01c6fef1644e2 | [log] [tgz] |
|---|---|---|
| author | Felix Fietkau <nbd@nbd.name> | Mon Jul 01 13:15:07 2019 +0200 |
| committer | Felix Fietkau <nbd@nbd.name> | Thu Sep 05 17:42:27 2019 +0200 |
| tree | b6660812f06aabdab6b66d81954fe0984b5c42c5 | |
| parent | 84b0b66352470e6491c06159735ac916dc69a2ef [diff] |
mt76: round up length on mt76_wr_copy When beacon length is not a multiple of 4, the beacon could be sent with the last 1-3 bytes corrupted. The skb data is guaranteed to have enough room for reading beyond the end, because it is always followed by skb_shared_info, so rounding up is safe. All other callers of mt76_wr_copy have multiple-of-4 length already. Cc: stable@vger.kernel.org Signed-off-by: Felix Fietkau <nbd@nbd.name>